GHSA-r2v5-5vcr-h3vq

GitHub Security Advisory

Cross-site Scripting in Apache Zeppelin

✓ GitHub Reviewed MODERATE Has CVE

Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by "Josna Joseph".

Maven org.apache.zeppelin:zeppelin

Affected versions: 0 (fixed in 0.8.0)

CVE-2018-1328

GHSA ID

GHSA-r2v5-5vcr-h3vq

Published

April 24, 2019 4:07 PM

Last Modified

August 3, 2021 5:54 PM

CVSS Score

5.0 /10

Primary Ecosystem

Maven

Primary Package

org.apache.zeppelin:zeppelin

GitHub Reviewed

✓ Yes

Last updated: November 25, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.