Описание
Apache Zeppelin: Denial of service with invalid notebook name
Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI. This issue affects Apache Zeppelin from 0.10.1 before 0.11.0.
Users are recommended to upgrade to version 0.11.0, which fixes the issue.
Пакеты
Наименование
org.apache.zeppelin:zeppelin-server
maven
Затронутые версииВерсия исправления
>= 0.10.1, < 0.11.0
0.11.0
Связанные уязвимости
CVSS3: 5.3
nvd
почти 2 года назад
Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue.