Threats tagged 'ghsa-p288-459w-jxj6'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.7%	CVE-2024-41177Apache Zeppelin · XSS in the Helium module Medium6.1EPSS 0.7%2025-08-03GCVE DatabaseCVE-2024-41177 Apache Zeppelin before version 0.12.0 contains a Cross-Site Scripting (XSS) vulnerability in its Helium module due to an incomplete blacklist. This flaw allows attackers to inject malicious scripts, potentially impacting confidentiality and integrity. The issue is fixed in version 0.12.0, which users are advised to upgrade to. EPSS 0.7%Report on CVE-2024-41177 Vulnerability CWE-79 #ghsa-p288-459w-jxj6 #maven	GCVE Database	2025-08-03

Page 1 of 1