CVE-2026-93737

Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...

CVE-2026-93737 Azkaban through 4.0.0 Authorization Bypass via ScheduleServlet

Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...

CVE-2026-93737

Azkaban through 4.0.0 contains an authorization bypass in the ScheduleServlet fetchSchedule action , which omits project permission checks. An authenticated user can supply arbitrary project and flow identifiers to retrieve sensitive schedule details of any project, including execution times, cro...

EUVD-2026-83027

Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...

CVE-2026-93737 Azkaban through 4.0.0 Authorization Bypass via ScheduleServlet

Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...

CVE-2026-93737 Azkaban through 4.0.0 Authorization Bypass via ScheduleServlet

Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...

PT-2026-95484

Name of the Vulnerable Software and Affected Versions Azkaban versions prior to 4.0.1 Description An authorization bypass exists in the fetchSchedule action of the ScheduleServlet endpoint. Authenticated users can retrieve schedule configurations for any project by providing arbitrary project and...

CVE-2026-93737: Missing Authorization

Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flow identifiers to retrieve sensitive schedule details including execution time...

CVE-2020-10992

Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java...

ae.teletronics.nlp:categorisation (>=1.3, <=1.6), ae.teletronics.nlp:entityextraction (>=1.3, <=1.4) +4961 more potentially affected by CVE-2025-12183 via net.jpountz.lz4:lz4 (>=1.1.0, <=1.3.0)

net.jpountz.lz4:lz4 MAVEN version =1.1.0, =1.3, =1.3, =0.42.1, =1.3.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

EUVD-2020-3390

Malware in sbrugna...

MAL-2024-1797 Malicious code in @ozon-ob/azkaban (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2020-10992

Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java...

CVE-2020-10992

Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java...

Design/Logic Flaw

Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java...

Azkaban Code Issues Vulnerabilities

Azkaban is a batch workflow job scheduler for running Hadoop jobs. A code issue vulnerability exists in Azkaban 3.84.0 and prior versions. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. No detailed vulnerability detai...

CVE-2020-10992

Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java...

CVE-2020-10992

Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java...

CVE-2020-10992

Azkaban versions up to 3.84.0 are affected by an XML External Entity (XXE) vulnerability, tied to the code paths validator/XmlValidatorManager.java and user/XmlUserManager.java. The issue enables XXE in the processing of user-supplied XML, with the CVE-2020-10992 reporting a high-severity impact ...

PT-2020-12476

Name of the Vulnerable Software and Affected Versions Azkaban versions prior to 3.84.1 Description The issue allows XXE XML External Entity attacks, which is related to the XmlValidatorManager.java and XmlUserManager.java files in the validator and user directories, respectively. This can...