PRP: Request Code Injection in Apache Zeppelin shell (CVE-2024-31861) #499
Labels
Contributor queue
When a contributor has already one issue/PR in review, we put the following ones on hold with this.
Hi there.
I would like to start implementing a plugin to detect Code Injection in Apache Zeppelin shell (CVE-2024-31861). This vulnerability was published on April 2024.
References:
https://nvd.nist.gov/vuln/detail/CVE-2024-31861
Description:
Apache Zeppelin is an open-source web-based notebook that enables data-driven, interactive data analytics and collaborative documents. It is designed to support a wide variety of data sources and provide powerful visualization tools, making it a versatile platform for data scientists, data engineers, and analysts.
Affected Versions:
0.10.1 <= Apache Zeppelin < 0.11.1
Thanks.
The text was updated successfully, but these errors were encountered: