Description
Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0.
Remediation
References
http://www.openwall.com/lists/oss-security/2021/09/02/3
https://lists.apache.org/thread.html/r31012f2c8e39a5e12e14c1de030012cb8b51c037d953d73b291b7b50%40%3Cusers.zeppelin.apache.org%3E
https://lists.apache.org/thread.html/r90590aa5ea788128ecc2e822e1e64d5200b4cb92b06707b38da4cb3d%40%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/r90590aa5ea788128ecc2e822e1e64d5200b4cb92b06707b38da4cb3d%40%3Cusers.zeppelin.apache.org%3E
https://security.gentoo.org/glsa/202311-04
Related Vulnerabilities
CVE-2022-24718 Vulnerability in npm package @finastra/ssr-pages
CVE-2020-35199 Vulnerability in maven package org.igniterealtime.openfire.plugins:bookmarks
CVE-2018-1002201 Vulnerability in maven package org.zeroturnaround:zt-zip
CVE-2022-43426 Vulnerability in maven package io.jenkins.plugins:s3explorer
CVE-2018-1000408 Vulnerability in maven package org.jenkins-ci.main:jenkins-core