2 matches found
PYSEC-2026-3078 Open Redirect in Apache Superset
Apache Superset prior to 1.1.0 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link...
6.1CVSS6.4AI score0.63768EPSS
SaveExploits0References9
PT-2021-17758 · Apache · Apache Superset
Name of the Vulnerable Software and Affected Versions: Apache Superset versions prior to 1.1.0 Description: The issue allows for the creation of an external URL that could be malicious. By not checking user input for open redirects, the URL shortener functionality would allow for a malicious user...
6.1CVSS7.1AI score0.63768EPSS
SaveExploits0References14
20