~ / search / GHSA-prvg-rh5h-74jr

GHSA-prvg-rh5h-74jr

Apache Zeppelin CSRF vulnerability in the Credentials page

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-28656

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.zeppelin:zeppelin-web <= 0.9.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

References

External links from the advisory. They lead to third-party sites.