GHSA-79x5-cv79-49rj
Suggest an improvement- Source
- https://github.com/advisories/GHSA-79x5-cv79-49rj
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/01/GHSA-79x5-cv79-49rj/GHSA-79x5-cv79-49rj.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-79x5-cv79-49rj
- Aliases
- Published
- 2023-01-16T12:30:18Z
- Modified
- 2023-11-08T04:10:45.972844Z
- Severity
-
- 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- Apache Superset is vulnerable to Cross-Site Scripting (XSS)
- Details
-
Upload data forms do not correctly render user input leading to possible XSS attack vectors that can be performed by authenticated users with database connection update permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.
- References
Affected packages
PyPI / apache-superset
Package
- Name
- apache-superset
- View open source insights on deps.dev
- Purl
- pkg:pypi/apache-superset
PyPI / apache-superset
Package
- Name
- apache-superset
- View open source insights on deps.dev
- Purl
- pkg:pypi/apache-superset