org.apache.zeppelin:zeppelin-interpreter

3 results · Feed

• High 7.5
  CVE-2024-41169

  Apache Zeppelin: raft directory listing and file read

  The attacker can use the raft server protocol in an unauthenticated way. The attacker can see the server's resources, including directories and files. This issue affects Apache Zeppelin: from 0.10.1 up to 0.12.0. Users are recommended to upgrade to version 0.…

  Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin-server org.apache.zeppelin:zeppelin-interpreter Maven
  Jul 12, 2025
• Medium 6.1
  CVE-2024-31868

  Apache Zeppelin: XSS vulnerability in the helium module

  Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers can modify helium.json and exposure XSS attacks to normal users. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1. Users are recommended to upgrade to version …

  Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin-interpreter Maven
  Apr 9, 2024
• Critical 9.8
  CVE-2024-31866

  Apache Zeppelin: Interpreter download command does not escape malicious code injection

  Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers can execute shell scripts or malicious code by overriding configuration like ZEPPELIN_INTP_CLASSPATH_OVERRIDES. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.…

  Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin-interpreter Maven
  Apr 9, 2024