CVE-2024-31863: Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apache Zeppelin: from 0.10.1 before…

PriorityP430medium5.3CVSS 3.1

AVNACLPRNUINSUCNILAN

EPSS

1.01%

59.2th percentile

Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	zeppelin	—	—
apache_software_foundation	apache_zeppelin	>= 0.10.1 < 0.11.0	0.11.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.