CVE-2026-44617

Summary: CVE-2026-44617 describes an LDAP filter injection in Apache Zeppelin’s LdapRealm caused by escaping using RFC 4514 (DN escaping) instead of RFC 4515 (filter escaping), leading to insufficiently escaped special filter characters. This is an incomplete fix of CVE-2024-31867. Affected versi...

CVE-2026-44616 Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction

LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint and potentially expose directory...

Apache Zeppelin 授权问题漏洞

Apache Zeppelin is a Web-based open source notebook application from the Apache Foundation that supports interactive data analysis and collaborative documentation. The program supports interactive data analysis and collaborative documentation. Apache Zeppelin 0.9.0 and earlier versions contain a...