CVE Explorer
CVE-2026-44617
LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. This is an incomplete fix of CVE-2024-31867. This issue affects Apache Zeppelin versions 0.11.1, 0.11.2, and 0.12.0. Users are recommended to upgrade to version 0.12.1, which fixes this issue.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","product":"Apache Zeppelin","vendor":"Apache Software Foundation","versions":[{"lessThan":"0.12.1","status":"affected","version":"0.11.1","versionType":"semver"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:6a5efe1de76a9ba6b17c81d6313d608dac55392faafba7029bf2c74637a924a5 · sha256:e8f4c6734f5a4fca… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:6a5efe1de76a9ba6b17c81d6313d608dac55392faafba7029bf2c74637a924a5 · sha256:e8f4c6734f5a4fca… · /containers/adp/0/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-90","description":"CWE-90 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:6a5efe1de76a9ba6b17c81d6313d608dac55392faafba7029bf2c74637a924a5 · sha256:e8f4c6734f5a4fca… · /containers/cna/problemTypes/0/descriptions/0
Source references
3 source assertions{"name":"Apache Zeppelin PR #5226","tags":["patch"],"url":"https://github.com/apache/zeppelin/pull/5226"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:6a5efe1de76a9ba6b17c81d6313d608dac55392faafba7029bf2c74637a924a5 · sha256:e8f4c6734f5a4fca… · /containers/cna/references/0
{"tags":["vendor-advisory"],"url":"https://lists.apache.org/thread/s65t6n3s1v4j5b1w7zvv5w73ko69m1zv"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:6a5efe1de76a9ba6b17c81d6313d608dac55392faafba7029bf2c74637a924a5 · sha256:e8f4c6734f5a4fca… · /containers/cna/references/2
{"name":"CVE-2024-31867 (incomplete fix)","url":"https://www.cve.org/CVERecord?id=CVE-2024-31867"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:6a5efe1de76a9ba6b17c81d6313d608dac55392faafba7029bf2c74637a924a5 · sha256:e8f4c6734f5a4fca… · /containers/cna/references/1
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.