VULNERABILITY INTELLIGENCE
CVE-2019-10095
CVSS score9.8 CRITICAL
EPSS probability5.75%
CISA KEVNot currently listed
Published2021-09-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.
Weakness classification
- nvd@nist.gov: CWE-77
Primary references
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org
- security@apache.org
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Vendor Advisory