CVE-2026-44613

CVE-2026-44613 : Apache Zeppelin has a CSRF vulnerability in REST and WebSocket request handling due to a permissive default CORS configuration. This allowed cross-origin, state-changing requests and acceptance of text/plain bodies, enabling an attacker who lures an authenticated user to a malici...