← All advisories

Medium severity5.4NVD Advisory· Published Jun 22, 2026· Updated Jun 23, 2026

CVE-2025-62198

CVE-2025-62198

Description

An authenticated user can perform XSS.

This issue affects Apache Atlas versions 2.4.0 and earlier.

Users are recommended to upgrade to version 2.5.0, which fixes the issue.

Affected products

2

Apache/Atlas2 versions
cpe:2.3:a:apache:atlas:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:atlas:*:*:*:*:*:*:*:*range: <2.5.0
- (no CPE)range: <=2.4.0

Patches

Vulnerability mechanics

References

5

www.openwall.com/lists/oss-security/2026/06/20/1nvdMailing ListThird Party Advisory
github.com/advisories/GHSA-v73p-f52r-fmmrghsaADVISORY
lists.apache.org/thread/nv893lhz3ok08f25j3v4z1to5nrpdp7knvdMailing ListVendor Advisory
github.com/apache/atlas/commit/800f979307d6ea0f0b6563ec890f6b728022e497ghsa
nvd.nist.gov/vuln/detail/CVE-2025-62198ghsa

News mentions

0

No linked articles in our index yet.