Description
The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.
Remediation
References
https://lists.apache.org/thread/bxs056g3xlsofz0jb3wny9dw4llwptd2
Related Vulnerabilities
CVE-2023-28158 Vulnerability in maven package org.apache.archiva:archiva-web-common
CVE-2020-1926 Vulnerability in maven package org.apache.hive:hive-service
CVE-2020-2252 Vulnerability in maven package org.jenkins-ci.plugins:mailer
CVE-2019-16542 Vulnerability in maven package org.jenkins-ci.plugins:anchore-container-scanner
CVE-2021-20202 Vulnerability in maven package org.keycloak:keycloak-core