QwikSec

Security Database

CVE

CWE

Training

CVE-2022-43718

Published: Jan 16, 2023

Modified: Apr 7, 2025

PUBLISHED

Description

Upload data forms do not correctly render user input leading to possible XSS attack vectors that can be performed by authenticated users with database connection update permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Vendor	Product	Versions
Apache Software Foundation	Apache Superset	affected `2.0.0 - < 2.0.1` affected `0 - <= 1.5.2`

Weaknesses (CWE)

References

https://lists.apache.org/thread/8615608jt2x7b3rmqrtngldy8pn3nz2r

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.