CVE_Apache Ranger: 3.0.0

[gozan10]

Exploit Title: XSS Stored Vulnerability in Apache Ranger Version: 3.0.0
Date: 05/02/2024
Exploit Author: Gozan
Contact: https://github.com/gozan10
Product: Apache Ranger (https://github.com/apache/ranger)
Vendor: Apache Ranger
Description: XSS Stored exitst in module Settings > Permissions allow attacker excute arbitrary web script

First we need to create a user account with payload in field name.
Payload:
"><img src=x onerror=alert('XSS');>

Then we go to Settings > Permissions and click on one of the created modules

Then add the user containing payload XSS and save

Lastly, in module Settings > Permissions excute payload XSS