CVE-2024-31867

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-31867
Improper Input Validation vulnerability in Apache Zeppelin. The attackers can execute malicious queries by setting improper configuration properties to LDAP search filter. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1. Users are recommended to upgrade to version 0.11.1, which fixes the issue.
CVSS

No CVSS.

References
Link Resource
http://www.openwall.com/lists/oss-security/2024/04/09/12 Mailing List
http://www.openwall.com/lists/oss-security/2024/04/09/12 Mailing List
https://github.com/apache/zeppelin/pull/4714 Issue Tracking Patch
https://github.com/apache/zeppelin/pull/4714 Issue Tracking Patch
https://lists.apache.org/thread/s4scw8bxdhrjs0kg0lhb68xqd8y9lrtf Mailing List Vendor Advisory
https://lists.apache.org/thread/s4scw8bxdhrjs0kg0lhb68xqd8y9lrtf Mailing List Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*
History

05 May 2025, 20:12

Type Values Removed Values Added
CPE cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () http://www.openwall.com/lists/oss-security/2024/04/09/12 - () http://www.openwall.com/lists/oss-security/2024/04/09/12 - Mailing List
References () https://lists.apache.org/thread/s4scw8bxdhrjs0kg0lhb68xqd8y9lrtf - () https://lists.apache.org/thread/s4scw8bxdhrjs0kg0lhb68xqd8y9lrtf - Mailing List, Vendor Advisory
References () https://github.com/apache/zeppelin/pull/4714 - () https://github.com/apache/zeppelin/pull/4714 - Issue Tracking, Patch
First Time Apache
Apache zeppelin

13 Feb 2025, 18:18

Type Values Removed Values Added
Summary Improper Input Validation vulnerability in Apache Zeppelin. The attackers can execute malicious queries by setting improper configuration properties to LDAP search filter. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1. Users are recommended to upgrade to version 0.11.1, which fixes the issue. Improper Input Validation vulnerability in Apache Zeppelin. The attackers can execute malicious queries by setting improper configuration properties to LDAP search filter. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1. Users are recommended to upgrade to version 0.11.1, which fixes the issue.

06 Dec 2024, 21:15

Type Values Removed Values Added
CWE CWE-20

01 May 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/04/09/12 -

09 Apr 2024, 17:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-09 17:16

Updated : 2025-05-05 20:12

NVD link : CVE-2024-31867

Mitre link : CVE-2024-31867

JSON object : View

Products Affected

apache

  • zeppelin
CWE
NVD-CWE-noinfo