VULNERABILITY INTELLIGENCE

CVE-2021-28656

CVSS score5.4 MEDIUM

EPSS probability0.48%

CISA KEVNot currently listed

Published2024-04-09

Last modified2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.