Lucene search
GoogleOSV:PYSEC-2021-378HistoryOct 18, 2021 - 3:15 p.m.
PYSEC-2021-378
2021-10-1815:15:00
Google
osv.dev
7
0.001 Low
EPSS
Percentile
34.3%
Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL.
Related
cve
cve
CVE-2021-41971
2021-10-18 15:15:07
osv
osv
CVE-2021-41971
2021-10-18 15:15:07
Apache Superset SQL Injection when template processing is enabled
2022-05-24 19:17:46
nvd
nvd
CVE-2021-41971
2021-10-18 15:15:07
prion
prion
Sql injection
2021-10-18 15:15:00
cnvd
cnvd
Apache Superset SQL Injection Vulnerability
2021-10-19 00:00:00
cvelist
cvelist
CVE-2021-41971 Possible SQL Injection when template processing is enabled
2021-10-18 14:30:14
github
github
Apache Superset SQL Injection when template processing is enabled
2022-05-24 19:17:46