CVE-2021-28656CWE-352

Apache Zeppelin: CSRF vulnerability in the Credentials page

Medium · published April 9, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
40.6
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00482 · 40.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-04-09T09:12Z
EPSS history
Timeline
  • 09 APR 09:12Z
    Apache Zeppelin: CSRF vulnerability in the Credentials page
    cvelistv5