~ / search / GHSA-9p8j-hrgf-jc2g

GHSA-9p8j-hrgf-jc2g

Apache Zeppelin Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-46870

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.zeppelin:zeppelin < 0.8.2 0.8.2

Details

As written in the advisory (Markdown source, shown as plain text).

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Zeppelin allows logged-in users to execute arbitrary javascript in other users' browsers. This issue affects Apache Zeppelin before 0.8.2. Users are recommended to upgrade to a supported version of Zeppelin.

References

External links from the advisory. They lead to third-party sites.