Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Zeppelin

25 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-44613 Public exploit

    Apache Zeppelin: Cross-site request forgery in REST and WebSocket request handling

    Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin. The default CORS configuration allowed cross-origin state-changing requests and accepted text/plain request bodies, allowing an attacker who lures an authenticated user to a                  …

    Apache Software Foundation Apache Zeppelin