What is GHSA-prvg-rh5h-74jr?

GHSA-prvg-rh5h-74jr is a security advisory published by GitHub Security Advisories with Medium severity. Apache Zeppelin CSRF vulnerability in the Credentials page

Which CVE IDs does GHSA-prvg-rh5h-74jr cover?

GHSA-prvg-rh5h-74jr covers the following CVE IDs: CVE-2021-28656. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-prvg-rh5h-74jr?

GHSA-prvg-rh5h-74jr has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-prvg-rh5h-74jr?

GHSA-prvg-rh5h-74jr affects 1 product, including: maven/org.apache.zeppelin:zeppelin-web:\u003c= 0.9.0.

GHSA-prvg-rh5h-74jrMediumCVSS 5.4

Apache Zeppelin CSRF vulnerability in the Credentials page

Vendor

GitHub Security Advisories

Published

April 9, 2024

Last Modified

May 2, 2024

🔗 CVE IDs covered (1)

CVE-2021-28656 →

📋 Description

Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

🎯 Affected products1

maven/org.apache.zeppelin:zeppelin-web:<= 0.9.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-28656
https://lists.apache.org/thread/dttzkkv4qyn1rq2fdv1r94otb1osxztc
http://www.openwall.com/lists/oss-security/2024/04/09/3
https://github.com/advisories/GHSA-prvg-rh5h-74jr