CVE-2021-28655 — Apache Zeppelin: Arbitrary file deletion vulnerability

CVE-2021-28655

Apache Zeppelin: Arbitrary file deletion vulnerability PUBLISHED

Description (CNA)

The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Zeppelin	affected 0 through 0.9.0

CWE

CWE-20

References

https://lists.apache.org/thread/bxs056g3xlsofz0jb3wny9dw4llwptd2

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/bxs056g3xlsofz0jb3wny9dw4llwptd2

CISA-ADP

No English description supplied.

No references supplied.