Lucene search
GoogleOSV:GHSA-5FP8-C45M-256PHistoryMay 24, 2022 - 7:20 p.m.
Improper Encoding or Escaping of Output in Apache Superset
2022-05-2419:20:42
Google
osv.dev
10
improper encoding
escaping of output
apache superset
logs
authenticated user
forge log entries
inject malicious content
EPSS
0.001
Percentile
34.2%
Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.
References
Related
veracode
veracode
Log Injection
2021-11-18 07:35:44
osv
osv
PYSEC-2021-435
2021-11-17 15:15:00
CVE-2021-42250
2021-11-17 15:15:08
cve
cve
CVE-2021-42250
2021-11-17 15:15:08
github
github
Improper Encoding or Escaping of Output in Apache Superset
2022-05-24 19:20:42
cnvd
cnvd
Apache Superset Code Injection Vulnerability
2021-11-21 00:00:00
prion
prion
Input validation
2021-11-17 15:15:00
cvelist
cvelist
CVE-2021-42250 Possible log injection
2021-11-17 15:10:10
nvd
nvd
CVE-2021-42250
2021-11-17 15:15:08