CVE-2021-28656

Cross-Site Request Forgery CSRF vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...

CVE-2021-28656

Cross-Site Request Forgery CSRF vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...

CVE-2021-28656

The org.apache.zeppelin:zeppelin-web component in Apache Zeppelin versions 0.9.0 and prior is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability is caused by inadequate validation of requests on the Credential page , which could allow an attacker to submit malicious requests v...

PT-2024-10914 · Apache · Apache Zeppelin

Name of the Vulnerable Software and Affected Versions: Apache Zeppelin versions 0.9.0 and prior versions Description: A Cross-Site Request Forgery CSRF issue in the Credential page of Apache Zeppelin allows an attacker to submit malicious requests. Recommendations: For Apache Zeppelin versions...

Apache Zeppelin 跨站请求伪造漏洞

Apache Zeppelin is an open source web-based laptop application from the Apache USA Foundation. The program supports interactive data analysis and collaborative documentation. A cross-site request forgery vulnerability exists in Apache Zeppelin version 0.9.0 and earlier, which stems from a...

CVE-2021-28656: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...