CVE-2020-13928

MEDIUM

Apache Atlas < 2.1.0 - Stored Cross-Site Scripting via Search and Element Rendering

Title source: llm

Description

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.

References (1)

Core 1

Core References

Mailing List, Vendor Advisory x_refsource_misc

https://lists.apache.org/thread.html/ra468036f913be41b0c8fea74f91d53e273b0bfa838a4b140a5dcd463%40%3Cuser.atlas.apache.org%3E

Scores

CVSS v3 6.1

EPSS 0.0189

EPSS Percentile 83.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (2)

apache/atlas < 2.1.0

org.apache.atlas/apache-atlas 0 - 2.1.0Maven

Published Sep 16, 2020

Tracked Since Feb 18, 2026