GitHub Advisoryadvisory · Maven

GHSA-gm67-h5wr-w3cv Apache Zeppelin Improper Input Validation vulnerability

MEDIUM Published 2023-07-06 Modified 2023-07-06 Official page ↗
Aliases
CVE-2021-28655
Ecosystem
Maven
Packages
org.apache.zeppelin:zeppelin
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Weaknesses
CWE-20
Reviewed
2023-07-06

Affected packages

• Maven org.apache.zeppelin:zeppelin: < 0.10.0 → fixed in 0.10.0

Description

The improper Input Validation vulnerability in `Move folder to Trash` feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

Related

Alias · CVE (1)

  • CVE-2021-28655 The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References