CVE-2022-43721

An authenticated attacker with update datasets permission could change a dataset link to an untrusted site, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Score

CVSS 3.1 5.4 Medium

Status

Modified - security@apache.org

Published

2023-01-16

Last modified

2025-04-07

Weaknesses

CWE-601

Affected products

• Superset (Apache)
• Apache Superset (Apache Software Foundation)

References

• https://lists.apache.org/thread/s6sqt5jmcv6qxtvdot1t5tpt57v439kg