CVE-2021-27578 Cross Site Scripting in markdown interpreter

2021-09-0200:00:00

apache

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.9%

JSON

Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0.

CNA Affected

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Zeppelin",
    "versions": [
      {
        "version": "Apache Zeppelin",
        "status": "affected",
        "lessThan": "0.9.0",
        "versionType": "custom"
      }
    ]
  }
]