{"action":"Upgrade org.apache.ranger:ranger to 2.5.0 or later.","affected":[{"fixed":"2.5.0","introduced":"0.5.0"}],"component":"org.apache.ranger:ranger","cve_ids":["CVE-2024-45479"],"ecosystem":"Maven","epss":0.00687,"exploited":false,"fixed_versions":["2.5.0"],"ghsa_id":"GHSA-g9gf-g5jq-9h3v","id":"tcs_01M5N8XX0ZSBY9D970BWVW6QWQ","modified_at":"2026-08-31T23:00:09.795792559Z","published_at":"2025-01-22T00:33:36Z","references":["https://osv.dev/vulnerability/GHSA-g9gf-g5jq-9h3v","https://nvd.nist.gov/vuln/detail/CVE-2024-45479","https://github.com/apache/ranger/commit/447658578decf33d2b68d872a32db59227dfef1b#diff-0cb27d5067c1eced82c6a8a755e6142d20c633820996701a1ca616345ea8b1ca","https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","https://github.com/apache/ranger","http://www.openwall.com/lists/oss-security/2025/01/21/4"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-g9gf-g5jq-9h3v","url":"https://osv.dev/vulnerability/GHSA-g9gf-g5jq-9h3v"}],"summary":"Apache Ranger UI vulnerable to Server Side Request Forgery"}