CVE-2024-31867: 
Java vulnerability analysis and mitigation

CVE-2024-31867 is an Improper Input Validation vulnerability discovered in Apache Zeppelin that affects versions from 0.8.2 before 0.11.1. The vulnerability allows attackers to execute malicious queries by setting improper configuration properties to LDAP search filter (Apache Security, NVD). The issue was disclosed on April 9, 2024.

The vulnerability is classified as CWE-20 (Improper Input Validation) and has received a CVSS v3.1 base score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N (NVD). The issue stems from insufficient validation of LDAP search filter configuration properties, which could allow attackers to inject malicious queries.

When exploited, this vulnerability enables attackers to execute malicious queries through the LDAP search filter, potentially leading to unauthorized access to information or manipulation of LDAP queries (Apache Security).

The vulnerability can be exploited by setting improper configuration properties to LDAP search filter. The attack vector is network-accessible (AV:N) with low attack complexity (AC:L) and requires no privileges (PR:N) or user interaction (UI:N) (NVD).

Users are strongly recommended to upgrade to Apache Zeppelin version 0.11.1, which contains the fix for this vulnerability. This version implements proper escaping of LDAP search filters to prevent malicious query execution (Apache Security, GitHub PR).