Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-02477
HistoryDec 20, 2022 - 12:00 a.m.

Apache Zeppelin input validation error vulnerability

2022-12-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
17
apache zeppelin
input validation
vulnerability
move folder
trash
exploit
delete files
apache foundation
web-based
open source
notebook application
data analysis
collaborative documentation
improper input validation
arbitrary files
cnvd

EPSS

0.002

Percentile

53.1%

Apache Zeppelin is a Web-based open source notebook application from the Apache Foundation that supports interactive data analysis and collaborative documentation. Apache Zeppelin is vulnerable to an input validation error that results from improper input validation in its Move folder to Trash feature, which can be exploited to delete arbitrary files.

EPSS

0.002

Percentile

53.1%