search

google / tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.
Apache License 2.0
860 stars 178 forks source link

PRP: Request Code Injection in Apache Zeppelin shell (CVE-2024-31861) #499

Open W0ngL1 opened 3 weeks ago

W0ngL1 commented 3 weeks ago

Hi there.

I would like to start implementing a plugin to detect Code Injection in Apache Zeppelin shell (CVE-2024-31861). This vulnerability was published on April 2024.

References: https://nvd.nist.gov/vuln/detail/CVE-2024-31861

Description: Apache Zeppelin is an open-source web-based notebook that enables data-driven, interactive data analytics and collaborative documents. It is designed to support a wide variety of data sources and provide powerful visualization tools, making it a versatile platform for data scientists, data engineers, and analysts.

Affected Versions: 0.10.1 <= Apache Zeppelin < 0.11.1

Thanks.