CVE-2024-45479

published 2025-01-21

CVE-2024-45479: SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0…

critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.
Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	ranger	>= 2.4.0 < 2.5.0	2.5.0
apache_software_foundation	apache_ranger	>= 2.4.0 < 2.5.0	2.5.0

CWE-918 CWE-20