2 matches found
CVE-2021-41971
Apache Superset up to and including 1.3.0 when configured with ENABLETEMPLATEPROCESSING on disabled by default allowed SQL injection when a malicious authenticated user sends an http request with a custom URL...
8.8CVSS0.01765EPSS
SaveExploits0References5
CVE-2021-41971: Improper Neutralization of Special Elements used in an SQL Command
Apache Superset up to and including 1.3.0 when configured with ENABLETEMPLATEPROCESSING on disabled by default allowed SQL injection when a malicious authenticated user sends an http request with a custom URL...
8.8CVSS5.6AI score0.01765EPSS
SaveExploits0References3
20