Apache Zeppelin up to 0.11.0 Shell Interpreter code injection 🚫 [False Positive]

Noticeinfo

⚠️ This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

Productinfo

Vendor

• Apache

Name

• Zeppelin

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5
• 0.6
• 0.7
• 0.8
• 0.9
• 0.10
• 0.11.0

License

• open-source

Website

• Vendor: https://www.apache.org/
• Product: https://github.com/apache/zeppelin/

Timelineinfo

04/06/2024 🔍
04/10/2024 +4 days 🔍
04/10/2024 +0 days 🔍
06/21/2024 +72 days 🔍

Sourcesinfo

Vendor: apache.org
Product: github.com

Advisory: seclists.org
False Positive: Yes

CVE: CVE-2024-31861 (🔍)
GCVE (CVE): GCVE-0-2024-31861
GCVE (VulDB): GCVE-100-260250

Entryinfo

Created: 04/10/2024 19:43
Updated: 06/21/2024 15:33
Changes: 04/10/2024 19:43 (54), 05/16/2024 08:31 (1), 06/21/2024 15:33 (3)
Complete: 🔍
Cache ID: 216::103

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!