Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-0045

Malware in sbrugna...

8.8CVSS8.6AI score0.00732EPSS
Exploits0References9
OSV
OSV
added 2025/02/05 7:30 a.m.10 views

BIT-SUPERSET-2020-13948

While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s os package in the web application process in versions 0.37.1. It was thus...

8.8CVSS8.7AI score0.00732EPSS
Exploits0References4
OSV
OSV
added 2022/05/24 10:28 p.m.13 views

GHSA-CJ7G-H7RF-H8J9 Apache Superset OS Command Injection

While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s os package in the web application process in versions 0.37.1. It was thus...

8.8CVSS8.7AI score0.00732EPSS
Exploits0References7
OSV
OSV
added 2020/09/17 1:15 p.m.22 views

PYSEC-2020-222

While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s os package in the web application process in versions 0.37.1. It was thus...

8.8CVSS4.3AI score0.00732EPSS
Exploits0References3
PyPA
PyPA
added 2020/09/17 1:15 p.m.3 views

PYSEC-2020-222

While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s os package in the web application process in versions 0.37.1. It was thus...

8.8CVSS7.1AI score0.00732EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2020/09/17 12:31 p.m.17 views

CVE-2020-13948

While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s os package in the web application process in versions 0.37.1. It was thus...

8.7AI score0.00732EPSS
Exploits0References3
Rows per page
Query Builder