CVE-2024-45478
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Jan 21, 2025
Updated: Jan 22, 2025
CWE ID 20
Summary
CVE-2024-45478 refers to a Stored Cross-Site Scripting (XSS) vulnerability found in the Edit Service Page of Apache Ranger UI in version 2.4.0. Malicious scripts injected into this page could be executed in users' browsers when they view a specially crafted webpage, potentially leading to unauthorized access or data theft. It is strongly advised to upgrade to Apache Ranger version 2.5.0, which includes a patch for this security flaw.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.