CVE-2018-1317: Apache Zeppelin

High severity, CVSS 8.8. EPSS: 4.6% chance of exploitation in the next 30 days.

In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication.

Affected products

• Apache Zeppelin: before 0.8.0 (fixed in 0.8.0)

Published 2019-04-23. Last modified 2026-06-17.