Vulnerabilities

TI-2026-32524 CVE-2026-44617 · GHSA-853r-vxg2-55r2

Apache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867

LOW 36

LDAP filter injection vulnerability in Apache Zeppelin.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00838 Published 2026-07-30 Fixed in 0.12.1 CWE-90

TI-2026-32523 CVE-2026-44616 · GHSA-8cjf-mhhj-2c5p

LOW 32

LDAP injection vulnerability in Apache Zeppelin.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00758 Published 2026-07-30 Fixed in 0.12.1 CWE-90

TI-2026-32521 CVE-2026-44613 · GHSA-3w7g-q5x7-jg2r

LOW 27

Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00387 Published 2026-07-30 Fixed in 0.12.1 CWE-352