CyberRota Analysis
AI-GeneratedApache Zeppelin versions 0.11.1, 0.11.2, and 0.12.0 are vulnerable to an LDAP filter injection due to improper escaping of special characters in LDAP search filters. This vulnerability could allow attackers to manipulate LDAP queries, potentially leading to unauthorized access or data exposure. Organizations using affected versions should prioritize upgrading to version 0.12.1 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. This is an incomplete fix of CVE-2024-31867. This issue affects Apache Zeppelin versions 0.11.1, 0.11.2, and 0.12.0. Users are recommended to upgrade to version 0.12.1, which fixes this issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)