Lucene search

K
osvGoogleOSV:GHSA-QMR3-52XF-WMHX
HistoryApr 09, 2024 - 6:30 p.m.

Apache Zeppelin: LDAP search filter query Injection Vulnerability

2024-04-0918:30:28
Google
osv.dev
4
apache zeppelin
input validation
ldap
query injection
upgrade

AI Score

7

Confidence

High

EPSS

0

Percentile

15.5%

Improper Input Validation vulnerability in Apache Zeppelin.

The attackers can execute malicious queries by setting improper configuration properties to LDAP search filter.
This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1.

Users are recommended to upgrade to version 0.11.1, which fixes the issue.

AI Score

7

Confidence

High

EPSS

0

Percentile

15.5%

Related for OSV:GHSA-QMR3-52XF-WMHX