CVE-2021-27578

—

CVSS 3.1

6.1 medium

EPSS

3%p88

Published

Sep 2, 2021 (Sep 2, 2021)

Modified

Jun 17, 2026

Description

Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0.

Vendors: apache
Products: zeppelin
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news0 stories

No ingested article mentions this CVE yet.