Lucene search
Veracode Vulnerability DatabaseVERACODE:13682HistoryApr 24, 2019 - 10:46 a.m.
Cross-site Scripting (XSS)
2019-04-2410:46:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.003
Percentile
66.1%
Apache Zeppelin is vulnerable to cross-site scripting (XSS). The attack exists because it does not sanitize Note permissions, allowing an attacker to inject arbitrary script through the affected parameter.
Related
github
github
Cross-site Scripting in Apache Zeppelin
2019-04-24 16:07:36
cve
cve
CVE-2018-1328
2019-04-23 15:29:00
osv
osv
Cross-site Scripting in Apache Zeppelin
2019-04-24 16:07:36
CVE-2018-1328
2019-04-23 15:29:00
cvelist
cvelist
CVE-2018-1328
2019-04-23 14:45:24
nvd
nvd
CVE-2018-1328
2019-04-23 15:29:00
prion
prion
Cross site scripting
2019-04-23 15:29:00