CVE-2024-45479: Apache Ranger: SSRF in Edit Service page - Add logic to filter requests to localhost
Published Jan 21, 2025
·Updated
SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.
Affected Software
3 affected componentsFixes available
Apache Ranger
maven/org.apache.ranger:ranger<2.5.0
2.5.0
Apache Ranger>=2.4.0<2.5.0
Event History
Jan 21, 2025
CVE Published
via MITRE·09:26 PM
Data Sourced
via MITRE·09:26 PM
DescriptionWeakness
Jan 22, 2025
Advisory Published
via GitHub·12:33 AM
Data Sourced
via GitHub·12:33 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-45479?
CVE-2024-45479 is classified as a high severity SSRF vulnerability in Apache Ranger UI.
2
How do I fix CVE-2024-45479?
To fix CVE-2024-45479, you should upgrade to Apache Ranger version 2.5.0 or higher.
3
What software is affected by CVE-2024-45479?
CVE-2024-45479 affects Apache Ranger versions prior to 2.5.0.
4
Where can I find more information about CVE-2024-45479?
For more information about CVE-2024-45479, check the official Apache Ranger security documentation.
5
What type of vulnerability is CVE-2024-45479?
CVE-2024-45479 is an SSRF (Server-Side Request Forgery) vulnerability.