CVE-2024-41169

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41169
The attacker can use the raft server protocol in an unauthenticated way. The attacker can see the server's resources, including directories and files. This issue affects Apache Zeppelin: from 0.10.1 up to 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue by removing the Cluster Interpreter.
CVSS

No CVSS.

References
Link Resource
https://github.com/apache/zeppelin/pull/4841 Patch Vendor Advisory
https://issues.apache.org/jira/browse/ZEPPELIN-6101 Patch Issue Tracking
https://lists.apache.org/thread/moyym04993c8owh4h0qj98r43tbo8qdd Mailing List Vendor Advisory Issue Tracking Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*
History

29 Jul 2025, 15:07

Type Values Removed Values Added
First Time Apache
Apache zeppelin
CPE cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*
References () https://lists.apache.org/thread/moyym04993c8owh4h0qj98r43tbo8qdd - () https://lists.apache.org/thread/moyym04993c8owh4h0qj98r43tbo8qdd - Mailing List, Vendor Advisory, Issue Tracking, Patch
References () https://github.com/apache/zeppelin/pull/4841 - () https://github.com/apache/zeppelin/pull/4841 - Patch, Vendor Advisory
References () https://issues.apache.org/jira/browse/ZEPPELIN-6101 - () https://issues.apache.org/jira/browse/ZEPPELIN-6101 - Patch, Issue Tracking

14 Jul 2025, 16:15

Type Values Removed Values Added
CWE CWE-664

12 Jul 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-12 17:15

Updated : 2025-07-29 15:07

NVD link : CVE-2024-41169

Mitre link : CVE-2024-41169

JSON object : View

Products Affected

apache

  • zeppelin
CWE

No CWE.