3 matches found
EUVD-2021-29069
Malicious code in bioql PyPI...
PT-2024-21816 · Apache · Apache Superset
Name of the Vulnerable Software and Affected Versions: Apache Superset versions prior to 3.0.4 Apache Superset versions 3.1.0 through 3.1.1 Description: An authenticated user with privileges to create alerts on Alerts & Reports can generate a specially crafted SQL statement that triggers an error...
PT-2023-12398 · Osnexus · Quantastor
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an authenticated attacker to create alerts that trigger a stored XSS attack. This means an attacker with authentication credentials can...