Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Apache Zeppelin 0.12.0 Clear all filters
TI-2024-34680 CVE-2024-51775 · GHSA-xg8j-j6vp-6h5w

Apache Zeppelin: Command Injection via CSWSH

Priority LOW 39

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00289 Published 2025-08-03 Fixed in 0.12.0 CWE-1385
TI-2024-27523 CVE-2024-41177 · GHSA-p288-459w-jxj6

Apache Zeppelin: XSS in the Helium module

Priority LOW 29

Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0073 Published 2025-08-03 Fixed in 0.12.0 CWE-79