CVE-2021-28655
CVSS V2 None
CVSS V3 None
Description
The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.
Overview
- CVE ID
- CVE-2021-28655
- Assigner
- security@apache.org
- Vulnerability Status
- Analyzed
- Published Version
- 2022-12-16T13:15:08
- Last Modified Date
- 2022-12-20T19:08:47
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:* | 1 | OR | 0.9.0 |
References
| Reference URL | Reference Tags |
|---|---|
| https://lists.apache.org/thread/bxs056g3xlsofz0jb3wny9dw4llwptd2 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2021-28655 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28655 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-12-18 09:30:25 | Added to TrackCVE | |||
| 2022-12-19 16:16:13 | 2022-12-16T13:15:08.723 | 2022-12-16T13:15:08 | CVE Published Date | updated |
| 2022-12-19 16:16:13 | 2022-12-16T14:39:27 | CVE Modified Date | updated | |
| 2022-12-19 16:16:13 | Awaiting Analysis | Undergoing Analysis | Vulnerability Status | updated |
| 2022-12-21 07:02:41 | 2022-12-20T19:08:47 | CVE Modified Date | updated | |
| 2022-12-21 07:02:41 | Undergoing Analysis | Analyzed | Vulnerability Status | updated |
| 2022-12-21 07:02:45 | CPE Information | updated |