Description: Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0.
Credit: Apache Zeppelin would like to thank Paulo Pacheco for reporting this issue
