Tagged: Apache Zeppelin

April 10, 2024

CVE-2024-31861: Apache Zeppelin Vulnerability Opens Door to Code Injection Attacks

A security vulnerability labeled as “important” has surfaced in Apache Zeppelin, the popular data analytics notebook tool. Identified as CVE-2024-31861, this flaw gives attackers a way to inject malicious code through Zeppelin’s Shell interpreter,...

Vulnerability

December 19, 2022

CVE-2021-28655: Apache Zeppelin arbitrary file deletion vulnerability

Apache Zeppelin developers last week announced the release of patches for two vulnerabilities in its software, including a high-severity defect. The most severe of these issues is CVE-2021-28655 (CVSS score of 8.2), an arbitrary...