Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Apache Zeppelin — GLSA-202311-04 Clear all filters
TI-2021-09031 CVE-2021-27578 · GHSA-mf7q-gw5f-q8jj

Cross Site Scripting in markdown interpreter

Priority LOW 33

Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03232 Published 2021-09-02 Fixed in 0.9.0 CWE-79
TI-2020-10907 CVE-2020-13929 · GHSA-87p2-cvhq-q4mv

Notebook permissions bypass

Priority LOW 39

Authentication bypass vulnerability in Apache Zeppelin allows an attacker to bypass Zeppelin authentication mechanism to act as another user.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03258 Published 2021-09-02 Fixed in 0.10.0 CWE-287
TI-2019-07420 CVE-2019-10095 · GHSA-4qw8-pgpr-p9mq

bash command injection in spark interpreter

Priority MEDIUM 51

bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05747 Published 2021-09-02 Fixed in 0.10.0 CWE-77