216.73.217.98

CVE-2024-52279

· Published 03/08/2025 10:15 · Modified 04/08/2025 15:06

Labels: CVE-2024-52279 2025-08-03CVE-2024-52279CWE-20[email protected]

Essential information

Published
03/08/2025 10:15
Modified
04/08/2025 15:06
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not account for URL encoded input. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue.

NVD status

Status
Undergoing Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
apache / zeppelin cpe:2.3:a:apache:zeppelin:0.11.1-0.12.0:*:*:*:*:*:*:*
apache / zeppelin cpe:2.3:a:apache:zeppelin:0.12.0:*:*:*:*:*:*:*

References