[<prev] [next>] [day] [month] [year] [list]
Message-ID: <5ca00489-f6fa-26ac-3849-8055992e6955@apache.org>
Date: Tue, 09 Apr 2024 02:10:27 +0000
From: Jongyoul Lee <jongyoul@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2021-28656: Apache Zeppelin: CSRF vulnerability in the
Credentials page
Severity: low
Affected versions:
- Apache Zeppelin through 0.9.0
Description:
Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.
Credit:
Jiang Qingzhi (finder)
References:
https://zeppelin.apache.org/
https://www.cve.org/CVERecord?id=CVE-2021-28656
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
