Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46319
HistoryApr 10, 2024 - 11:32 a.m.

Cross Site Request Forgery (CSRF)

2024-04-1011:32:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cross site request forgery
zeppelin-web
inadequate validation
phishing

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

org.apache.zeppelin: zeppelin-web is vulnerable to Cross Site Request Forgery (CSRF). The vulnerability is due to inadequate validation of requests, which allows an attacker to submit malicious requests via phishing.

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%