CVE-2026-73099 - Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body override
CVE ID :CVE-2026-73099 Published : Nov. 5, 2026, 12:17 p.m. | 50 minutes ago Description :Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau. The REST server accepts a "content" query parameter that replaces the request body, and this is enabled by default on every HTTP method,...