CVE-2022-27479

SQL injection vulnerability in chart data API

Summary

Original description

The description as published by the source.

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami superset

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.4.2"}]}]

References

advisory openwall.com
web lists.apache.org
web lists.apache.org
web nvd.nist.gov