Path Traversal in Apache Zeppelin

Executive Summary

This is a path traversal vulnerability in Apache Zeppelin versions 0.9.0 through 0.12.0. When the FileSystemNotebookRepo is configured, an authenticated attacker with note renaming or folder access permissions can use path traversal sequences in note or folder paths. The application then constructs filesystem paths without proper validation, allowing operations like moving, writing, or deleting files outside the intended notebook directory.

Useful 0 Not Useful 0

Detection Guidance

Check Apache Zeppelin version with: curl -s http://<zeppelin-server>/api/version | grep version. If version is between 0.9.0 and 0.12.0, the system is vulnerable. Inspect logs for unusual note or folder path modifications, especially with traversal segments like '../'.

Useful 0 Not Useful 0

Impact Analysis

An attacker could access, modify, or delete sensitive notebook files outside the configured notebook directory. This may lead to data theft, unauthorized changes to notebooks, or disruption of Zeppelin services. The impact depends on the permissions of the Zeppelin process and the files it can access.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate compliance requirements by allowing unauthorized access to sensitive data stored in notebooks. For GDPR, it may lead to unauthorized data exposure or processing. For HIPAA, it could result in unauthorized access to protected health information. Compliance violations may occur if data is accessed or altered outside permitted scopes.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Apache Zeppelin to version 0.12.1 or later immediately. Restrict permissions for note renaming and folder operations to trusted users only. Review and audit existing notebook paths for unauthorized modifications.

Useful 0 Not Useful 0