CVE-2023-42502
MEDIUM5.4EPSS 0.09%Apache Superset: Open Redirect Vulnerability
發布日:2023/11/28修改日:2025/5/20
描述
An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.
受影響套件(2)
- Bitnami/supersetfrom 0, < 3.0.0
- PyPI/apache-supersetfrom 0, < 3.0.0
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |