Threats tagged 'ghsa-66j8-c83m-gj5f'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.3%	CVE-2024-31864Org.apache.zeppelin:zeppelin jdbc: Apache Zeppelin remote code execution by adding malicious JDBC connection string Critical9.8EPSS 1.3%2024-04-09GCVE DatabaseCVE-2024-31864 Apache Zeppelin versions prior to 0.11.1 contain a code injection vulnerability in the JDBC interpreter. An attacker can exploit this flaw by injecting malicious code or sensitive configuration through a crafted MySQL JDBC connection string. This vulnerability allows remote code execution without authentication. The issue is fixed in version 0.11.1. EPSS 1.3%Report on CVE-2024-31864 Vulnerability CWE-94 #ghsa-66j8-c83m-gj5f #maven	GCVE Database	2024-04-09

Page 1 of 1