| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.zeppelin:zeppelin | < 0.8.0 | 0.8.0 |
| zeppelin | < 0.8.0 | 0.8.0 |
In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free