Description
A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.
Remediation
References
https://lists.apache.org/thread/0rqvcxo6brmos9w3lzfsdn2lsmlblpw3
Related Vulnerabilities
CVE-2015-8855 Vulnerability in maven package org.webjars.bower:semver
CVE-2021-42340 Vulnerability in maven package org.apache.tomcat:tomcat-websocket
CVE-2023-25768 Vulnerability in maven package org.jenkins-ci.plugins:azure-credentials
CVE-2023-46659 Vulnerability in maven package org.jenkins-ci.plugins:trac
CVE-2022-43428 Vulnerability in maven package com.compuware.jenkins:compuware-topaz-for-total-test