CVE-2021-28656

Cross-Site Request Forgery CSRF vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...

CVE-2021-28656 Apache Zeppelin: CSRF vulnerability in the Credentials page

Cross-Site Request Forgery CSRF vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...

CVE-2021-28656

The org.apache.zeppelin:zeppelin-web component in Apache Zeppelin versions 0.9.0 and prior is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability is caused by inadequate validation of requests on the Credential page , which could allow an attacker to submit malicious requests v...