Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Zeppelin
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-27578 1 Apache 1 Zeppelin 2023-11-24 4.3 MEDIUM 6.1 MEDIUM
Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0.
CVE-2018-1328 1 Apache 1 Zeppelin 2019-04-24 4.3 MEDIUM 6.1 MEDIUM
Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by "Josna Joseph".