CVE-2026-44613: Apache Zeppelin: Cross-site request forgery in REST and WebSocket request handling

<p>Posted by Jongyoul Lee on Jul 30</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Zeppelin 0.6.0 before 0.12.1<br /> <br /> Description:<br /> <br /> Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin. The default CORS configuration allowed cross-origin <br /> state-changing requests and accepted text/plain request bodies, allowing an attacker who lur