17 matches found
CVE-2026-93737
Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...
CVE-2026-93737 Azkaban through 4.0.0 Authorization Bypass via ScheduleServlet
Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...
CVE-2026-93737 Azkaban through 4.0.0 Authorization Bypass via ScheduleServlet
Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...
CVE-2026-93737
Azkaban through 4.0.0 contains an authorization bypass in the ScheduleServlet fetchSchedule action , which omits project permission checks. An authenticated user can supply arbitrary project and flow identifiers to retrieve sensitive schedule details of any project, including execution times, cro...
EUVD-2026-83027
Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...
CVE-2026-93737 Azkaban through 4.0.0 Authorization Bypass via ScheduleServlet
Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...
CVE-2026-93737: Missing Authorization
Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...
CVE-2020-10992
Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java...
ae.teletronics.nlp:categorisation (>=1.3, <=1.6), ae.teletronics.nlp:entityextraction (>=1.3, <=1.4) +4961 more potentially affected by CVE-2025-12183 via net.jpountz.lz4:lz4 (>=1.1.0, <=1.3.0)
net.jpountz.lz4:lz4 MAVEN version =1.1.0, =1.3, =1.3, =0.42.1, =1.3.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...
EUVD-2020-3390
Malware in sbrugna...
MAL-2024-1797 Malicious code in @ozon-ob/azkaban (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2020-10992
Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java...
CVE-2020-10992
Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java...
Design/Logic Flaw
Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java...
Azkaban Code Issues Vulnerabilities
Azkaban is a batch workflow job scheduler for running Hadoop jobs. A code issue vulnerability exists in Azkaban 3.84.0 and prior versions. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. No detailed vulnerability detai...
CVE-2020-10992
Azkaban versions up to 3.84.0 are affected by an XML External Entity (XXE) vulnerability, tied to the code paths validator/XmlValidatorManager.java and user/XmlUserManager.java. The issue enables XXE in the processing of user-supplied XML, with the CVE-2020-10992 reporting a high-severity impact ...