← Database

CVE-2024-41177

MEDIUM CVSS: 6.1 Published: 2025-08-03 Modified: 2026-06-17

Description

Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin. This issue affects Apache Zeppelin: before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue.

Affected Platforms

Apache Zeppelin

Weakness Type

CWE-79

References