EUVD-2021-0020

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Apache Superset up to 1.0.1 allowed the creation of malicious external URLs via unchecked user input.

Reporter	Title	Published	Views	Family All 14
CNNVD	Apache Superset up 输入验证错误漏洞	27 Apr 202100:00	–	cnnvd
CNVD	Apache Superset Input Validation Error Vulnerability	28 Apr 202100:00	–	cnvd
CVE	CVE-2021-28125	27 Apr 202109:27	–	cve
Cvelist	CVE-2021-28125 Apache Superset Open Redirect	27 Apr 202109:27	–	cvelist
Github Security Blog	Open Redirect in Apache Superset	6 Oct 202117:47	–	github
NVD	CVE-2021-28125	27 Apr 202110:15	–	nvd
OSV	BIT-SUPERSET-2021-28125 Apache Superset Open Redirect	5 Feb 202507:29	–	osv
OSV	GHSA-PFWG-RXF4-97C3 Open Redirect in Apache Superset	6 Oct 202117:47	–	osv
OSV	PYSEC-2021-128	27 Apr 202110:15	–	osv
Prion	Open redirect	27 Apr 202110:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "c8d23f87-0b12-3290-b6d3-5056c749c4d7",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "46eae03a-a182-3c91-8842-f4db77242087",
        "product": {
          "name": "Apache Superset"
        },
        "product_version": "Apache Superset ≤1.0.1"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E
lists	www.lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434@%3Cdev.superset.apache.org%3E
openwall	www.openwall.com/lists/oss-security/2021/04/27/2
github	www.github.com/advisories/GHSA-pfwg-rxf4-97c3
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-28125
github	www.github.com/apache/superset/commit/eb35b804acf4d84cb70d02743e04b8afebbee029
github	www.github.com/pypa/advisory-database/tree/main/vulns/apache-superset/PYSEC-2021-128.yaml
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1

CVSS 25.8

EPSS0.02577