Lucene search

China National Vulnerability DatabaseCNVD-2024-01021

HistoryDec 21, 2023 - 12:00 a.m.

Apache Superset SQL Injection Vulnerability (CNVD-2024-0102192)

2023-12-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache superset

data visualization

data exploration

sql injection

vulnerability

authenticated

remote attacker

specially crafted sql

where_in jinja macro

apache foundation

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

48.0%

JSON

Apache Superset is a data visualization and data exploration platform from the Apache (USA) Foundation. Apache Superset suffers from a SQL injection vulnerability that can be exploited by an authenticated, remote attacker to send specially crafted SQL statements to the where_in JINJA macro.