← back
CVE-2021-27578

Cross Site Scripting in markdown interpreter

EPSS 3.2%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 3.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
02 Sep 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0.
Affected products
Apache Software Foundation · Apache Zeppelin

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://lists.apache.org/thread.html/r31012f2c8e39a5e12e14c1de030012cb8b51c037d953d73b291b7b50%40%3Cusers.zeppelin.apache.org%3Ehttps://lists.apache.org/thread.html/r90590aa5ea788128ecc2e822e1e64d5200b4cb92b06707b38da4cb3d%40%3Cannounce.apache.org%3Ehttps://lists.apache.org/thread.html/r90590aa5ea788128ecc2e822e1e64d5200b4cb92b06707b38da4cb3d%40%3Cusers.zeppelin.apache.org%3Ehttps://security.gentoo.org/glsa/202311-04http://www.openwall.com/lists/oss-security/2021/09/02/3