Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers can execute shell scripts or malicious code by overriding configuration like ZEPPELIN_INTP_CLASSPATH_OVERRIDES. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1. Users are recommended to upgrade to version 0.11.1, which fixes the issue.
An attacker can overwrite the application's configuration settings, such as the ZEPPELIN_INTP_CLASSPATH_OVERRIDES parameter, by introducing malicious values into them. Since this data is not properly encoded or escaped before further processing, it is possible to inject and execute arbitrary shell scripts or other malicious code. The attack does not require authentication or user interaction.
An attacker can gain full control over the server by executing arbitrary code in the context of the Apache Zeppelin process, leading to violations of confidentiality, integrity, and system availability.
Apache Zeppelin should be updated to version 0.11.1 or later, which eliminates the described vulnerability.
Apache Zeppelin in versions from 0.8.2 to 0.11.1 (excluding 0.11.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HApache Zeppelin
APPApache0.8.2 – 0.11.1 (bez)
Related vulnerabilities
Apache Zeppelin: Code Injection przez JDBC przy połączeniu z MySQL
bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spar...
The attacker can use the raft server protocol in an unauthenticated way. The attacker can see the server's res...
Authentication bypass vulnerability in Apache Zeppelin allows an attacker to bypass Zeppelin authentication me...
Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid ...