Filtered by vendor Apache
Subscriptions
Filtered by product Zeppelin
Subscriptions
Total
22 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2018-1317 | 1 Apache | 1 Zeppelin | 2024-11-21 | N/A |
In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication. | ||||
CVE-2017-12619 | 1 Apache | 1 Zeppelin | 2024-11-21 | N/A |
Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. Issue was reported by "stone lone". |