Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Apache Zeppelin 0.11.0 Clear all filters
TI-2024-20980 CVE-2024-31862 · GHSA-6623-c6mr-6737

Apache Zeppelin: Denial of service with invalid notebook name

Priority LOW 33

Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01365 Published 2024-04-09 Fixed in 0.11.0 CWE-20
TI-2024-20979 CVE-2024-31860 · GHSA-g64r-xf39-q4p5

Apache Zeppelin: Path traversal vulnerability

Priority LOW 32

Improper Input Validation vulnerability in Apache Zeppelin.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01386 Published 2024-04-09 Fixed in 0.11.0 CWE-22