CVE-2022-43718

🗓️ 16 Jan 2023 11:10:15Reported by [email protected]Type

Apache Superset XSS vulnerability in data upload forms

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 10
CNVD	Apache Superset Cross-Site Scripting Vulnerability (CNVD-2023-05219)	18 Jan 202300:00	–	cnvd
OSV	BIT-SUPERSET-2022-43718	5 Feb 202507:29	–	osv
OSV	Apache Superset is vulnerable to Cross-Site Scripting (XSS)	16 Jan 202312:30	–	osv
OSV	CVE-2022-43718	16 Jan 202311:15	–	osv
CVE	CVE-2022-43718	16 Jan 202311:15	–	cve
Veracode	Cross-site Scripting (XSS)	18 Jan 202301:39	–	veracode
Cvelist	CVE-2022-43718 Apache Superset: Cross-Site Scripting vulnerability on upload forms	16 Jan 202310:10	–	cvelist
Prion	Design/Logic Flaw	16 Jan 202311:15	–	prion
Vulnrichment	CVE-2022-43718 Apache Superset: Cross-Site Scripting vulnerability on upload forms	16 Jan 202310:10	–	vulnrichment
Github Security Blog	Apache Superset is vulnerable to Cross-Site Scripting (XSS)	16 Jan 202312:30	–	github

Nvd

Node

apache supersetRange≤1.5.2

apache supersetMatch2.0.0-

apache supersetMatch2.0.0rc1

apache supersetMatch2.0.0rc2

Source	Link
lists	www.lists.apache.org/thread/8615608jt2x7b3rmqrtngldy8pn3nz2r

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Jan 2023 11:15Current

5.1Medium risk

Vulners AI Score5.1

CVSS35.4

EPSS0.00885

CWE-79