Lucene search

China National Vulnerability DatabaseCNVD-2024-06442

HistoryJan 26, 2024 - 12:00 a.m.

Apache Superset Cross-Site Scripting Vulnerability (CNVD-2024-06442)

2024-01-2600:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache

superset

cross-site scripting

vulnerability

data visualization

data exploration

filtering

escaping

user-supplied data

authenticated attacker

web page

AI Score

5.8

Confidence

High

EPSS

Percentile

10.7%

JSON

Apache Superset is a data visualization and data exploration platform from the Apache (USA) Foundation. A cross-site scripting vulnerability exists in Apache Superset versions prior to 3.0.3, which stems from the application’s lack of effective filtering and escaping of user-supplied data, and can be exploited by an authenticated attacker to inject malicious script into a web page.