CVE-2021-41971
Possible SQL Injection when template processing is enabled
Résumé
Possible SQL Injection when template processing is enabled
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
superset
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.3.1"}]}]
Références
- advisory lists.apache.org
- web nvd.nist.gov