Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-31862 EUVD-2024-1118GHSA-6623-c6mr-6737

Apache Zeppelin: Denial of service with invalid notebook name

Published Apr 9, 2024 · Updated Feb 13, 2025 · Assigned by apache

Description

Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0.

Users are recommended to upgrade to version 0.11.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Zeppelin 0.10.1 – < 0.11.0 0.11.0

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.zeppelin:zeppelin-server >= 0.10.1, < 0.11.0 0.11.0 GHSA-6623-c6mr-6737

References