CVE-2024-41177

Publication date

2025-08-03 10:09:43

Family

apache

State

PUBLISHED

Description

Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin. This issue affects Apache Zeppelin: before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue.