Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the url validator in jdbc interpreter. An attacker can access arbitrary files on the system by submitting a specially crafted, non UTF-8 encoded JDBC connection string. Note: This issue...

Sensitive Information Exposure

Zeppelin: JDBC interpreter is vulnerable to sensitive information exposure. The vulnerability exists because it does not redact the credentials in interpreter settings page and stores as plaintext in the configuration files...