Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-10095
9.8
CRITICALCVSS v3
Published
September 2, 2021
CVSS v2
10 HIGH
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.
apache/zeppelin
GitHubWeb-based notebook that enables data-driven, interactive data analytics and collaborative documents with SQL, Scala and more.
GitHubWeb-based notebook that enables data-driven, interactive data analytics and collaborative documents with SQL, Scala and more.<= 0.9.0NVD