~ / search / GHSA-4qw8-pgpr-p9mq

GHSA-4qw8-pgpr-p9mq

Bash command injection in Apache Zeppelin

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-10095

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.zeppelin:zeppelin < 0.10.0 0.10.0

Details

As written in the advisory (Markdown source, shown as plain text).

bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

References

External links from the advisory. They lead to third-party sites.