CVE-2021-42250

Possible log injection

Summary

Original description

The description as published by the source.

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami superset

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.3.2"}]}]

References

advisory openwall.com
advisory lists.apache.org
web nvd.nist.gov