Description
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Zeppelin allows logged-in users to execute arbitrary javascript in other users' browsers. This issue affects Apache Zeppelin before 0.8.2. Users are recommended to upgrade to a supported version of Zeppelin.
Remediation
References
https://lists.apache.org/thread/gb1wdnrm1095xw6qznpsycfrht4lwbwc
Related Vulnerabilities
CVE-2022-22931 Vulnerability in maven package org.apache.james:james-server
CVE-2022-44644 Vulnerability in maven package org.apache.linkis:linkis-metadata-query-service-jdbc
CVE-2020-14389 Vulnerability in maven package org.keycloak:keycloak-core
CVE-2020-13954 Vulnerability in maven package org.apache.cxf:cxf-rt-transports-http
CVE-2020-1945 Vulnerability in maven package org.apache.ant:ant