Описание
Apache Zeppelin: Replacing other users notebook, bypassing any permissions
Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin. This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0.
Users are recommended to upgrade to version 0.11.0, which fixes the issue.
Пакеты
Наименование
org.apache.zeppelin:zeppelin-server
maven
Затронутые версииВерсия исправления
>= 0.10.1, < 0.11.0
0.11.0
Связанные уязвимости
CVSS3: 5.3
nvd
почти 2 года назад
Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue.