Arbitrary File Deletion

zeppelin-server is vulnerable to Arbitrary File Deletion. The vulnerability exists due to the improper input validation in the moveFolderToTrash function of NotebookService.java, allowing an attacker to delete arbitrary files...