Severity: moderate Affected versions:
- Apache Zeppelin (org.apache.zeppelin:zeppelin-web) before 0.12.0 Description: Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin. This issue affects Apache Zeppelin: before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue. Credit: H Ming (finder) References: https://github.com/apache/zeppelin/pull/4755 https://github.com/apache/zeppelin/pull/4795 https://zeppelin.apache.org/ https://www.cve.org/CVERecord?id=CVE-2024-41177
