QwikSec

Security Database

CVE

CWE

Training

CVE-2022-43717

Published: Jan 16, 2023

Modified: Apr 4, 2025

PUBLISHED

Description

Dashboard rendering does not sufficiently sanitize the content of markdown components leading to possible XSS attack vectors that can be performed by authenticated users with create dashboard permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Vendor	Product	Versions
Apache Software Foundation	Apache Superset	affected `2.0.0 - < 2.0.1` affected `0 - <= 1.5.2`

Weaknesses (CWE)

References

https://lists.apache.org/thread/g6zy6vkpvkbj5mj32vmyzwol5ldtg9pl

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.