org.apache.zeppelin:zeppelin

4 results · Clear filters · Feed

• Medium 5.4
  CVE-2022-46870

  Apache Zeppelin: Stored XSS in note permissions

  An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Zeppelin allows logged-in users to execute arbitrary javascript in other users' browsers. This issue affects Apache Zeppelin before 0.8.2. Users ar…

  Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin Maven
  Dec 16, 2022
• Medium 6.5
  CVE-2021-28655

  Apache Zeppelin: Arbitrary file deletion vulnerability

  The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

  Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin Maven
  Dec 16, 2022
• Medium 6.1
  CVE-2021-27578

  Cross Site Scripting in markdown interpreter

  Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0.

  Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin Maven
  Sep 2, 2021
• Medium 6.1
  CVE-2018-1328

  Cross-site Scripting in Apache Zeppelin

  Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by "Josna Joseph".

  Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin Maven
  Apr 23, 2019