Improper Input Validation Vulnerability Affects Apache Zeppelin SAP
CVE-2022-47894

5.3MEDIUM

Key Information:

Vendor

Apache
Status
Apache Zeppelin SAP
Vendor
CVE Published:
9 April 2024

What is CVE-2022-47894?

An improper input validation vulnerability exists in the Apache Zeppelin SAP component, impacting versions from 0.8.0 up to, but not including, 0.11.0. This issue arises due to insufficient checks on user input, which could lead to unintended behavior within the application. Since the Apache Zeppelin SAP project has been retired and is no longer maintained, no patches or updates will be released to address this vulnerability. Users are advised to either migrate to alternative solutions or limit access to the affected instances to only trusted users, thereby mitigating potential security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Apache Zeppelin SAP 0.8.0 < 0.11.0

References

https://github.com/apache/zeppelin/pull/4302
patch
https://lists.apache.org/thread/csf4k73kkn3nx58pm0p2qrylb...
vendor-advisory
http://www.openwall.com/lists/oss-security/2024/04/09/4

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

kuiplatain@knownsec 404 Team
JSON
.