Vulnerabilities

TI-2024-20985 CVE-2024-31867 · GHSA-qmr3-52xf-wmhx

Apache Zeppelin: LDAP search filter query Injection Vulnerability

LOW 31

Improper Input Validation vulnerability in Apache Zeppelin.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01176 Published 2024-04-09 Fixed in 0.11.1 CWE-20

TI-2024-20986 CVE-2024-31868 · GHSA-rrvf-5w4r-3x7v

LOW 30

Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0131 Published 2024-04-09 Fixed in 0.11.1 CWE-79

TI-2024-20984 CVE-2024-31866 · GHSA-86jx-wr74-xr74

MEDIUM 52

Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01581 Published 2024-04-09 Fixed in 0.11.1 CWE-116

TI-2024-20983 CVE-2024-31865 · GHSA-g44m-x5h7-fr5q

LOW 38

Improper Input Validation vulnerability in Apache Zeppelin.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01723 Published 2024-04-09 Fixed in 0.11.1 CWE-20

TI-2024-20982 CVE-2024-31864 · GHSA-66j8-c83m-gj5f

MEDIUM 51

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Zeppelin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01257 Published 2024-04-09 Fixed in 0.11.1 CWE-94