You are viewing a plain text version of this content. The canonical link for it is here.
- Participate in the ASF 25th Anniversary Campaign - posted by Brian Proffitt <bk...@apache.org> on 2024/04/03 13:50:12 UTC, 0 replies.
- Shell interpreter in v0.11.1 is not installed - posted by Nils Glueck <ni...@posteo.net> on 2024/04/08 22:19:29 UTC, 3 replies.
- CVE-2024-31860: Apache Zeppelin: Path traversal vulnerability - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/09 02:09:08 UTC, 0 replies.
- CVE-2021-28656: Apache Zeppelin: CSRF vulnerability in the Credentials page - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/09 02:10:27 UTC, 0 replies.
- CVE-2022-47894: Apache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/09 02:36:20 UTC, 0 replies.
- CVE-2024-31862: Apache Zeppelin: Denial of service with invalid notebook name - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/09 02:37:39 UTC, 0 replies.
- CVE-2024-31863: Apache Zeppelin: Replacing other users notebook, bypassing any permissions - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/09 02:39:31 UTC, 0 replies.
- CVE-2024-31864: Apache Zeppelin: Remote code execution by adding malicious JDBC connection string - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/09 14:43:06 UTC, 0 replies.
- CVE-2024-31865: Apache Zeppelin: Cron arbitrary user impersonation with improper privileges - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/09 14:43:43 UTC, 0 replies.
- CVE-2024-31866: Apache Zeppelin: Interpreter download command does not escape malicious code injection - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/09 14:45:01 UTC, 0 replies.
- CVE-2024-31868: Apache Zeppelin: XSS vulnerability in the helium module - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/09 14:46:58 UTC, 0 replies.
- CVE-2024-31867: Apache Zeppelin: LDAP search filter query Injection Vulnerability - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/09 15:06:59 UTC, 0 replies.
- Unsubscribe - posted by Peng Cheng <rh...@gmail.com> on 2024/04/09 16:23:53 UTC, 0 replies.
- CVE-2024-31861: Apache Zeppelin: Code injection by Shell interpreter - posted by Jongyoul Lee <jo...@apache.org> on 2024/04/10 16:18:45 UTC, 0 replies.
- [DISCUSS] Shell interpreter - posted by Jongyoul Lee <jo...@gmail.com> on 2024/04/11 09:39:56 UTC, 1 replies.
- Re: [External] : [DISCUSS] Shell interpreter - posted by Michiel Haisma <mi...@oracle.com> on 2024/04/11 10:31:26 UTC, 0 replies.
- Re: Zeppelin/Helium packages - not showing up! - posted by Jongyoul Lee <jo...@gmail.com> on 2024/04/21 12:52:13 UTC, 1 replies.
- [VOTE] Revert Shell Interpreter - posted by Jongyoul Lee <jo...@gmail.com> on 2024/04/27 12:20:31 UTC, 16 replies.
- Integration with Azure Entra ID - posted by Jose Barato <jo...@gmail.com> on 2024/04/29 09:47:19 UTC, 0 replies.