Lucene search
Veracode Vulnerability DatabaseVERACODE:38900HistoryJan 18, 2023 - 1:39 a.m.
Cross-site Scripting (XSS)
2023-01-1801:39:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
cross-site scripting
apache_superset
upload data forms
authenticated attacker
javascript
0.001 Low
EPSS
Percentile
32.8%
apache_superset is vulnerable to Cross-Site Scripting (XSS) attacks. The library does not properly render user inputs via the Upload data forms endpoint, allowing an authenticated attacker with database connection update permissions to inject and execute malicious JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache-superset | eq | 2.0.0 | |
| apache-superset | le | 1.5.2 | |
| apache-superset | eq | 2.0.0 | |
| apache-superset | le | 1.5.2 |
Related
cnvd
cnvd
Apache Superset Cross-Site Scripting Vulnerability (CNVD-2023-05219)
2023-01-18 00:00:00
cvelist
cvelist
osv
osv
Apache Superset is vulnerable to Cross-Site Scripting (XSS)
2023-01-16 12:30:18
CVE-2022-43718
2023-01-16 11:15:10
prion
prion
Design/Logic Flaw
2023-01-16 11:15:00
nvd
nvd
CVE-2022-43718
2023-01-16 11:15:10
github
github
Apache Superset is vulnerable to Cross-Site Scripting (XSS)
2023-01-16 12:30:18
cve
cve
CVE-2022-43718
2023-01-16 11:15:10