Org.apache.zeppelin:zeppelin

This hub aggregates every CVE we track for Org.apache.zeppelin:zeppelin, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 8 most recently published vulnerabilities affecting Org.apache.zeppelin:zeppelin.

• CVE-2022-46870Apache Zeppelin: Stored XSS in note permissions5.4Dec 16, 2022
• CVE-2021-28655Apache Zeppelin: Arbitrary file deletion vulnerability6.5Dec 16, 2022
• CVE-2021-27578Cross Site Scripting in markdown interpreter6.1Sep 2, 2021
• CVE-2020-13929Notebook permissions bypass7.5Sep 2, 2021
• CVE-2019-10095bash command injection in spark interpreter9.8Sep 2, 2021
• CVE-2018-1328Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by "Josna Joseph".6.1Apr 23, 2019
• CVE-2018-1317In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication.8.8Apr 23, 2019
• CVE-2017-12619Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. Issue was reported by "stone lone".8.1Apr 23, 2019