CVE-2021-28125

Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click...

CVE-2021-28125

CVE-2021-28125 affects Apache Superset up to and including 1.0.1. The issue is an open redirect in the URL shortener functionality caused by not validating user input, enabling a malicious user to craft a short URL for a dashboard that could deceive users into clicking it. Connected advisories co...