VULNERABILITY INTELLIGENCE
CVE-2021-27578
CVSS score6.1 MEDIUM
EPSS probability3.23%
CISA KEVNot currently listed
Published2021-09-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0.
Weakness classification
- nvd@nist.gov: CWE-79
Primary references
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org
- security@apache.org
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Vendor Advisory