Lucene search
Veracode Vulnerability DatabaseVERACODE:31952HistorySep 03, 2021 - 2:34 a.m.
OS Command Injection
2021-09-0302:34:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.02 Low
EPSS
Percentile
89.0%
zeppelin-zengine is vulnerable to OS command injection. An attacker is able to inject bash commands into Spark interpreter settings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zeppelin: zengine | le | 0.9.0 | |
| zeppelin: zengine | le | 0.9.0 |
References
www.openwall.com/lists/oss-security/2021/09/02/1
github.com/apache/zeppelin/commit/8a7e0b87144fba81a22055684441906ad1c327af
lists.apache.org/thread.html/rd56389ba9cab30a6c976b9a4a6df0f85cbe8fba6a60a3cf6e3ba716b@%3Cusers.zeppelin.apache.org%3E
lists.apache.org/thread.html/rdf06e8423833b3daadc30c56a2ff47c48920864d5199476daa897208%40%3Cusers.zeppelin.apache.org%3E
lists.apache.org/thread.html/rdf06e8423833b3daadc30c56a2ff47c48920864d5199476daa897208@%3Cannounce.apache.org%3E
lists.apache.org/thread.html/rdf06e8423833b3daadc30c56a2ff47c48920864d5199476daa897208@%3Cusers.zeppelin.apache.org%3E
Related
cnvd
cnvd
Apache Zeppelin Command Injection Vulnerability
2021-09-03 00:00:00
cvelist
cvelist
CVE-2019-10095 bash command injection in spark interpreter
2021-09-02 00:00:00
osv
osv
Bash command injection in Apache Zeppelin
2021-09-07 22:56:43
CVE-2019-10095
2021-09-02 17:15:07
prion
prion
Command injection
2021-09-02 17:15:00
cve
cve
CVE-2019-10095
2021-09-02 17:15:07
nvd
nvd
CVE-2019-10095
2021-09-02 17:15:07
github
github
Bash command injection in Apache Zeppelin
2021-09-07 22:56:43
gentoo
gentoo
Zeppelin: Multiple Vulnerabilities
2023-11-24 00:00:00
nessus
nessus
GLSA-202311-04 : Zeppelin: Multiple Vulnerabilities
2023-11-24 00:00:00