QwikSec

Security Database

CVE

CWE

Training

CVE-2022-43721

Published: Jan 16, 2023

Modified: Apr 7, 2025

PUBLISHED

Description

An authenticated attacker with update datasets permission could change a dataset link to an untrusted site, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Vendor	Product	Versions
Apache Software Foundation	Apache Superset	affected `2.0.0 - < 2.0.1` affected `0 - <= 1.5.2`

Weaknesses (CWE)

References

https://lists.apache.org/thread/s6sqt5jmcv6qxtvdot1t5tpt57v439kg

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.