Threats tagged 'ghsa-jr43-q92q-5q82'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 1.1%	CVE-2024-52279Apache Zeppelin · Arbitrary file read by adding malicious JDBC connection string High7.5EPSS 1.1%2025-08-03GCVE DatabaseCVE-2024-52279 Apache Zeppelin versions from 0.11.1 up to but not including 0.12.0 contain an improper input validation vulnerability related to JDBC URL handling. This flaw allows an attacker to perform arbitrary file reads by exploiting URL encoded input that bypasses previous validation fixes. The issue is resolved in version 0.12.0. EPSS 1.1%Report on CVE-2024-52279 Vulnerability CWE-20 #ghsa-jr43-q92q-5q82 #maven	GCVE Database	2025-08-03

Page 1 of 1