CVE-2024-31862: Apache Zeppelin: Denial of service with invalid notebook name
Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI. This issue affects Apache Zeppelin from 0.10.1 before 0.11.0.
Users are recommended to upgrade to version 0.11.0, which fixes the issue.
Other sources
Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0.
Users are recommended to upgrade to version 0.11.0, which fixes the issue.
— NVD
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31862?
CVE-2024-31862 is classified as a high severity vulnerability due to its improper input validation.
How do I fix CVE-2024-31862?
To fix CVE-2024-31862, upgrade Apache Zeppelin to version 0.11.0 or later.
Which versions of Apache Zeppelin are affected by CVE-2024-31862?
CVE-2024-31862 affects Apache Zeppelin versions from 0.10.1 to just before 0.11.0.
What kind of vulnerability is CVE-2024-31862?
CVE-2024-31862 is an improper input validation vulnerability occurring within the UI when creating new notes.
Is there a workaround for CVE-2024-31862?
No known workaround exists for CVE-2024-31862; upgrading to the fixed version is the recommended approach.