CVE-2022-45048: Apache Ranger

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0.

Affected products

• Apache Ranger: version 2.3.0 only

Published 2023-05-05. Last modified 2026-06-17.