Threats tagged 'ghsa-8cjf-mhhj-2c5p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.8%	CVE-2026-44616Apache Zeppelin · LDAP Injection Medium6.5EPSS 0.8%2026-07-30CVE Database V5CVE-2026-44616 Apache Zeppelin versions 0.6.0 through 0.12.0 contain an LDAP injection vulnerability in the ActiveDirectoryGroupRealm component. This flaw allows an authenticated attacker to inject LDAP filter syntax via the user-search endpoint and potentially expose directory information. The role-lookup path is also affected after successful LDAP authentication. The issue is fixed in version 0.12.1. EPSS 0.8%Vulnerability Apache Software Foundation CWE-90 #ghsa-8cjf-mhhj-2c5p	CVE Database V5	2026-07-30

Page 1 of 1