Package · Maven

org.apache.zeppelin:zeppelin-jdbc

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2024-52279

Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not account for URL encoded input. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended to upgrade to version 0.1…

Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin-jdbc Maven

Aug 3, 2025