CVE-2018-1328

MEDIUM

Apache Zeppelin < 0.8.0 - Stored Cross-Site Scripting via Note Permissions

Title source: llm

Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by "Josna Joseph".

Core 4

Core References

Mailing List mailing-list x_refsource_mlist

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

Vendor Advisory x_refsource_misc

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

CVSS v3 6.1

EPSS 0.0087

EPSS Percentile 75.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (2)

apache/zeppelin < 0.8.0

org.apache.zeppelin/zeppelin 0 - 0.8.0Maven

Published Apr 23, 2019

Tracked Since Feb 18, 2026