Lucene search

China National Vulnerability DatabaseCNVD-2024-17936

HistoryApr 11, 2024 - 12:00 a.m.

Apache Zeppelin Input Validation Error Vulnerability (CNVD-2024-17936)

2024-04-1100:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache zeppelin

web-based application

open source

data analysis

documentation

input validation

vulnerability

attacker

api

privilege calls

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Apache Zeppelin is a Web-based open source laptop application from the Apache (USA) Foundation. The program supports interactive data analysis and collaborative documentation. Apache Zeppelin has an input validation error vulnerability that can be exploited by an attacker to update the cron API using invalid or incorrect privilege calls.

CPENameOperatorVersion
apache zeppelin >=0.8.2，lt0.11.1

CPE	Name	Operator	Version
	apache zeppelin >=0.8.2，	lt	0.11.1