What is GHSA-gm67-h5wr-w3cv?

GHSA-gm67-h5wr-w3cv is a security advisory published by GitHub Security Advisories with Medium severity. Apache Zeppelin Improper Input Validation vulnerability

Which CVE IDs does GHSA-gm67-h5wr-w3cv cover?

GHSA-gm67-h5wr-w3cv covers the following CVE IDs: CVE-2021-28655. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gm67-h5wr-w3cv?

GHSA-gm67-h5wr-w3cv has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-gm67-h5wr-w3cv?

GHSA-gm67-h5wr-w3cv affects 1 product, including: maven/org.apache.zeppelin:zeppelin:\u003c 0.10.0.

GHSA-gm67-h5wr-w3cvMediumCVSS 6.5

Apache Zeppelin Improper Input Validation vulnerability

Vendor

GitHub Security Advisories

Published

July 6, 2023

Last Modified

July 6, 2023

🔗 CVE IDs covered (1)

CVE-2021-28655 →

📋 Description

The improper Input Validation vulnerability in Move folder to Trash feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

🎯 Affected products1

maven/org.apache.zeppelin:zeppelin:< 0.10.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2021-28655
https://lists.apache.org/thread/bxs056g3xlsofz0jb3wny9dw4llwptd2
https://github.com/advisories/GHSA-gm67-h5wr-w3cv