CVE-2022-43719

Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Score

CVSS 3.1 8.8 High

Status

Modified - security@apache.org

Published

2023-01-16

Last modified

2025-04-07

Weaknesses

CWE-352

Affected products

• Superset (Apache)
• Apache Superset (Apache Software Foundation)

References

• https://lists.apache.org/thread/xc309h2dphrkg33154djf3nqlh2xc1c0