CVE-2021-28655

Published: Dec 16, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

Affected (1)

Products: Apache: Zeppelin

Apache

1 product

Zeppelin

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Zeppelin	Up to 0.9.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://lists.apache.org/thread/bxs056g3xlsofz0jb3wny9dw4llwptd2

Source: security@apache.org

Mailing ListVendor Advisory

https://lists.apache.org/thread/bxs056g3xlsofz0jb3wny9dw4llwptd2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListVendor Advisory

Timeline

No history available yet.