CVE-2021-28655 Apache Zeppelin: Arbitrary file deletion vulnerability

2022-12-1612:51:51

CWE-20

apache

www.cve.org

cve-2021-28655

input validation

apache zeppelin

file deletion

EPSS

0.002

Percentile

53.1%

JSON

The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Zeppelin",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "0.9.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

lists.apache.org/thread/bxs056g3xlsofz0jb3wny9dw4llwptd2

EPSS

0.002

Percentile

53.1%

JSON

Related for CVELIST:CVE-2021-28655