Beveiligingsadvies

CVE-2026-44616

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-30 15:21:21

Laatst bijgewerkt 2026-07-31 17:51:37

Toegewezen door apache

CVSS-score 6.5

Status PUBLISHED

Beschrijving

LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint and potentially expose directory information. The role-lookup path was also affected after successful LDAP authentication. This issue affects Apache Zeppelin versions 0.6.0 through 0.12.0. Users are recommended to upgrade to version 0.12.1, which fixes this issue.

← Alle CVE's bekijken Bekijk op cve.org ↗