Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-46870
5.4
MEDIUMCVSS v3
Published
December 16, 2022
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Zeppelin allows logged-in users to execute arbitrary javascript in other users' browsers. This issue affects Apache Zeppelin before 0.8.2. Users are recommended to upgrade to a supported version of Zeppelin.
apache/zeppelin
GitHubWeb-based notebook that enables data-driven, interactive data analytics and collaborative documents with SQL, Scala and more.
GitHubWeb-based notebook that enables data-driven, interactive data analytics and collaborative documents with SQL, Scala and more.< 0.8.2NVD