org.apache.zeppelin:zeppelin-web

2 results · Feed

• Medium 6.1
  CVE-2024-41177

  Apache Zeppelin: XSS in the Helium module

  Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin. This issue affects Apache Zeppelin: before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue.

  Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin-web Maven
  Aug 3, 2025
• Medium 5.4
  CVE-2021-28656

  Apache Zeppelin: CSRF vulnerability in the Credentials page

  Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

  Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin-web Maven
  Apr 9, 2024