CVE-2026-44617

Apache Zeppelin versions 0.11.1 , 0.11.2 , and 0.12.0 are vulnerable to an LDAP filter injection vulnerability within the LdapRealm component. The root cause is that the software used RFC 4514 distinguished-name escaping instead of the required RFC 4515 filter escaping when constructing search fi...

CVE-2026-44616 Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction

LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint and potentially expose directory...

CVE-2026-44616 Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction

LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint and potentially expose directory...

Apache Zeppelin 授权问题漏洞

Apache Zeppelin is a Web-based open source notebook application from the Apache Foundation that supports interactive data analysis and collaborative documentation. The program supports interactive data analysis and collaborative documentation. Apache Zeppelin 0.9.0 and earlier versions contain a...