Description
Apache Zeppelin shell 代码注入漏洞，攻击者可利用Zeppelin 中的shell功能执行任意命令。
Apache Zeppelin shell 代码注入漏洞（CVE-2024-31861）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-31861
https://github.com/advisories/GHSA-8pfj-w89w-m24x
https://www.miggo.io/vulnerability-database/cve/CVE-2024-31861
https://www.cvedetails.com/cve/CVE-2024-31861/
https://lists.apache.org/thread/99clvqrht5l5r6kzjzwg2kj94boc9sfh
https://advisories.gitlab.com/maven/org.apache.zeppelin/zeppelin-shell/CVE-2024-31861/
https://www.openwall.com/lists/oss-security/2024/04/10/8
https://securityonline.info/cve-2024-31861-apache-zeppelin-vulnerability-opens-door-to-code-injection-attacks/
https://hossted.com/knowledge-base/newsflash/specialized-software/graphic-design/security-risk-shell-interpreter-vulnerability-in-version-0-11-0/