Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-91423
HistoryNov 21, 2021 - 12:00 a.m.

Apache Superset Code Injection Vulnerability

2021-11-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
apache superset
code injection
vulnerability
data visualization
data exploration
authentication
web-based
attacker
log forgery
malicious content
apache foundation

EPSS

0.001

Percentile

34.2%

A code injection vulnerability exists in Apache Superset, a data visualization and data exploration platform from the Apache Foundation, prior to version 1.3.2, which stems from a web-based system or product that does not properly authenticate incoming data. An authenticated attacker could exploit the vulnerability to forge log entries or inject malicious content into the logs.

EPSS

0.001

Percentile

34.2%