Skip to contentApache Software Foundation Superset vulnerabilities
- apache supersetApache Superset: Open Redirect VulnerabilityCVE-2022-43721Fix available5.4 Medium
- apache supersetApache Superset: Improper rendering of user inputCVE-2022-43720Fix available5.4 Medium
- apache supersetApache Superset: Cross Site Request Forgery (CSRF) on accept, request access APICVE-2022-43719Fix available8.8 High
- apache supersetApache Superset: Cross-Site Scripting vulnerability on upload formsCVE-2022-43718Fix available5.4 Medium
- apache supersetApache Superset: Cross-Site Scripting on dashboardsCVE-2022-43717Fix available5.4 Medium
- apache supersetImproper access to dataset metadata informationCVE-2021-37839Fix available4.3 Medium
- apache supersetSQL injection vulnerability in chart data APICVE-2022-27479Fix available9.8 Critical
- apache supersetAPI sensitive information leakCVE-2021-44451Fix available6.5 Medium
- apache supersetPossible log injectionCVE-2021-42250Fix available6.5 Medium
- apache supersetCredentials leakCVE-2021-41972Fix available6.5 Medium
- apache supersetPossible SQL Injection when template processing is enabledCVE-2021-41971Fix available8.8 High
- apache supersetXSS vulnerability on Explore pageCVE-2021-32609Fix available5.4 Medium
- apache supersetApache Superset Open RedirectCVE-2021-28125Fix availableEPSS 64.0%6.1 Medium
- apache supersetApache Superset stored XSS on Dashboard markdownCVE-2021-27907Fix availableEPSS 86.4%5.4 Medium
- apache supersetPlaintext password leak in Apache SupersetCVE-2020-13952Fix available8.1 High
- apache supersetApache Superset OS Command InjectionCVE-2020-13948Fix available8.8 High
- apache supersetInformation disclosure in Apache SupersetCVE-2020-1932Fix available6.5 Medium