MEDIUM5.4
GHSA-v73p-f52r-fmmr
Apache Atlas UI: Authenticated User XSS
Quick fix
GHSA-v73p-f52r-fmmr — org.apache.atlas:atlas-dashboardv2: upgrade to the fixed version with the command below.
# pom.xml: bump <version>2.5.0</version> for org.apache.atlas:atlas-dashboardv2Details
An authenticated user can perform XSS.
This issue affects Apache Atlas versions 2.4.0 and earlier.
Users are recommended to upgrade to version 2.5.0, which fixes the issue.
Are you affected?
Enter the version of the package you're using.
Affected packages
Maven/org.apache.atlas:atlas-dashboardv2
Introduced in:
0Fixed in: 2.5.0Fix
# pom.xml: bump <version>2.5.0</version> for org.apache.atlas:atlas-dashboardv2References
- https://nvd.nist.gov/vuln/detail/CVE-2025-62198[ADVISORY]
- https://github.com/apache/atlas/commit/800f979307d6ea0f0b6563ec890f6b728022e497[WEB]
- https://github.com/apache/atlas[PACKAGE]
- https://lists.apache.org/thread/nv893lhz3ok08f25j3v4z1to5nrpdp7k[WEB]
- http://www.openwall.com/lists/oss-security/2026/06/20/1[WEB]