Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/08/14 3:30 p.m.18 views

Apache Superset's chart visualization has a stored Cross-Site Scripting (XSS) vulnerability

A stored Cross-Site Scripting XSS vulnerability exists in Apache Superset's chart visualization. An authenticated user with permissions to edit charts can inject a malicious payload into a column's label. The payload is not properly sanitized and gets executed in the victim's browser when they...

5.4CVSS6AI score0.00662EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder