Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Storm Webapp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-82438

    Apache Storm Webapp: Authenticated API Responses Exposed to Arbitrary Web Origins

    Description Three separate mechanisms allowed a web page on an unrelated origin to read responses that Storm's HTTP components served to an authenticated user. The Logviewer reflected the request's `Origin` header back in `Access-Control-Allow-Origin` while a…

    Apache Software Foundation Apache Storm Webapp