CVE-2025-62198: Apache Atlas UI: Authenticated User XSS

June 22, 2026 (updated September 11, 2026)

An authenticated user can perform XSS.

This issue affects Apache Atlas versions 2.4.0 and earlier.

Users are recommended to upgrade to version 2.5.0, which fixes the issue.

References

github.com/advisories/GHSA-v73p-f52r-fmmr
github.com/apache/atlas/commit/800f979307d6ea0f0b6563ec890f6b728022e497
lists.apache.org/thread/nv893lhz3ok08f25j3v4z1to5nrpdp7k
nvd.nist.gov/vuln/detail/CVE-2025-62198

Code Behaviors & Features

Detect and mitigate CVE-2025-62198 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →