Security Advisory

CVE-2021-41971

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-18 14:30:14

Last updated 2024-08-04 03:22:25

Assigner apache

State PUBLISHED

Description

Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL.

← Browse all CVEs View on cve.org ↗