CVE-2018-1317
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 4.4%
exploitation probability
4.4%top 9% of all CVEs
observed exploitation
nono source reports it
In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication.
Affected products
Apache Software Foundation · Apache Zeppelin