CVE-2022-47894
Medium
Description
Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before 0.11.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. For more information, the fix already was merged in the source code but Zeppelin decided to retire the SAP component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Apache Zeppelin
PublishedApr 9, 2024
First seenApr 9, 2024
Weakness typeCWE-20Improper input validation
How to fix
Update
- apache zeppelin0.11.0 or later
- org.apache.zeppelin:sap0.11.0 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache zeppelin | 0.8.0 ≤ v < 0.11.0 | 0.11.0 |
| org.apache.zeppelin:sapMaven | 0.8.0 ≤ v < 0.11.0 | 0.11.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.