CVE-2024-41169
Apache Zeppelin: raft directory listing and file read
Summary
Apache Zeppelin: raft directory listing and file read
Original description
The description as published by the source.
The attacker can use the raft server protocol in an unauthenticated way. The attacker can see the server's resources, including directories and files.
This issue affects Apache Zeppelin: from 0.10.1 up to 0.12.0.
Users are recommended to upgrade to version 0.12.0, which fixes the issue by removing the Cluster Interpreter.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- patch github.com
- report issues.apache.org
- web openwall.com
- web repo.maven.apache.org