CVE-2024-31862

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-31862
Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
http://www.openwall.com/lists/oss-security/2024/04/09/5 Mailing List
https://github.com/apache/zeppelin/pull/4632 Issue Tracking Patch
https://lists.apache.org/thread/73xdjx43yg4yz8bd4p3o8vzyybkysmn0 Mailing List Vendor Advisory
http://www.openwall.com/lists/oss-security/2024/04/09/5 Mailing List
https://github.com/apache/zeppelin/pull/4632 Issue Tracking Patch
https://lists.apache.org/thread/73xdjx43yg4yz8bd4p3o8vzyybkysmn0 Mailing List Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*
History

05 May 2025, 20:46

Type Values Removed Values Added
CPE cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*
First Time Apache
Apache zeppelin
CWE NVD-CWE-noinfo
References () http://www.openwall.com/lists/oss-security/2024/04/09/5 - () http://www.openwall.com/lists/oss-security/2024/04/09/5 - Mailing List
References () https://github.com/apache/zeppelin/pull/4632 - () https://github.com/apache/zeppelin/pull/4632 - Issue Tracking, Patch
References () https://lists.apache.org/thread/73xdjx43yg4yz8bd4p3o8vzyybkysmn0 - () https://lists.apache.org/thread/73xdjx43yg4yz8bd4p3o8vzyybkysmn0 - Mailing List, Vendor Advisory

13 Feb 2025, 18:18

Type Values Removed Values Added
Summary (en) Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue. (en) Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue.

21 Nov 2024, 09:14

Type Values Removed Values Added
References () http://www.openwall.com/lists/oss-security/2024/04/09/5 - () http://www.openwall.com/lists/oss-security/2024/04/09/5 -
References () https://github.com/apache/zeppelin/pull/4632 - () https://github.com/apache/zeppelin/pull/4632 -
References () https://lists.apache.org/thread/73xdjx43yg4yz8bd4p3o8vzyybkysmn0 - () https://lists.apache.org/thread/73xdjx43yg4yz8bd4p3o8vzyybkysmn0 -

21 Aug 2024, 15:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3
Summary
  • (es) Vulnerabilidad de validación de entrada incorrecta en Apache Zeppelin al crear una nueva nota desde la interfaz de usuario de Zeppelin. Este problema afecta a Apache Zeppelin: desde 0.10.1 antes de 0.11.0. Se recomienda a los usuarios actualizar a la versión 0.11.0, que soluciona el problema.

01 May 2024, 19:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/04/09/5 -

09 Apr 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-09 10:15

Updated : 2025-05-05 20:46

NVD link : CVE-2024-31862

Mitre link : CVE-2024-31862

CVE.ORG link : CVE-2024-31862

JSON object : View

Products Affected

apache

  • zeppelin
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo