GHSA-gm67-h5wr-w3cv

ghsaUSosv

Apache Zeppelin Improper Input Validation vulnerability

view advisory published 2023-07-06Licence: CC-BY-4.0

The improper Input Validation vulnerability in `Move folder to Trash` feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-28655US	medium6.5	1.64% (76th)	—	2022-12-16
The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppe…

references

External citations — patches, advisories, analysis.

https://github.com/apache/zeppelinPACKAGE
https://lists.apache.org/thread/bxs056g3xlsofz0jb3wny9dw4llwptd2WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-28655ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan