XSS vulnerability on Explore page (CVE-2021-32609)

Summary

XSS vulnerability on Explore page

Original description

The description as published by the source.

Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html (including scripts) into the page.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami superset

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.1"}]}]

References

advisory lists.apache.org
web nvd.nist.gov