CVE-2022-47894: apache zeppelin

csirt@kutim:~/threat-intel/cve/CVE-2022-47894

CVSS 5.3 · Medium EPSS 1,3%

Kerentanan Improper Input Validation pada apache zeppelin. Skor CVSS 3.1 5.3 (Medium) menurut CISA ADP.

Deskripsi (NVD)

Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before 0.11.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. For more information, the fix already was merged in the source code but Zeppelin decided to retire the SAP component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Rincian

Terbit di NVD: 9 April 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 5.3 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-20: Improper Input Validation
EPSS (30 hari): 1,3% peluang dieksploitasi; lebih tinggi dari 70,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
apache	zeppelin	Versi 0.8.0 hingga sebelum 0.11.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://lists.apache.org/thread/csf4k73kkn3nx58pm0p2qrylbox4fvyy mailing list · advisory vendor
http://www.openwall.com/lists/oss-security/2024/04/09/4 mailing list
https://github.com/apache/zeppelin/pull/4302 issue tracking

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.