Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-31863

Published: 09/04/2024 Updated: 01/05/2024

Vulnerability Summary

Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apache Zeppelin: from 0.10.1 prior to 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue.

Mailing Lists

Full Disclosure: CVE-2024-31863: Apache Zeppelin: Replacing other users notebook, bypassing any permissions
<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> CVE-2024-31863: Apache Zeppelin: Replacing other users notebook, bypassing any permissions <!--X-Subject-Header-End--> <!--X-H ...

References

CWE-290https://lists.apache.org/thread/3od2gfpwllmtc9c5ggw04ohn8s7w3ct9http://www.openwall.com/lists/oss-security/2024/04/09/6https://nvd.nist.govhttps://seclists.org/oss-sec/2024/q2/53
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook