Executive brief
Apache Zeppelin exposes server resources to unauthenticated attackers
Affected products
- Maven org.apache.zeppelin:zeppelin-interpreter
- Maven org.apache.zeppelin:zeppelin-server
Junglewise Threat Intelligence
CVE-2024-41169: Apache Zeppelin exposes server resources to unauthenticated attackers
CVE-2024-41169 · Severity: low · CVSS 3.1 · Published 2025-07-12
Technologies: org.apache.zeppelin:zeppelin-interpreter (Maven), org.apache.zeppelin:zeppelin-server (Maven). Vendors: Maven.
Related threats
- Apache Zeppelin: LDAP search filter query Injection Vulnerability
- Apache Zeppelin: Cron arbitrary user impersonation with improper privileges
- Improper escaping in Apache Zeppelin
- Apache Zeppelin vulnerable to cross-site scripting in the helium module
- Apache Zeppelin: Denial of service with invalid notebook name