Cross-site Scripting (XSS)

2024-04-1217:18:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

apache zeppelin

vulnerability

improper encoding

escaping

helium module

malicious scripts

software

AI Score

6.7

Confidence

High

EPSS

Percentile

15.5%

JSON

Apache Zeppelin is vulnerable to Cross-site Scripting (XSS). The vulnerability is due to improper encoding or escaping of output in the helium module. An attacker can modify helium.json and perform attacks on normal users by injecting malicious scripts.