Apache Superset Cross-site Scripting (XSS) vulnerability on the Explore page

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-32609 · ADVISORY
• GitHub Advisory GHSA-f8vc-f28w-x9c9 · ADVISORY
• apache/superset · WEB
• pypa/advisory-database · WEB
• lists.apache.org/thread.html/r2c09254e98b4f8b3deb422762bd0e2aa6d743b72d96c2f90cbaae31a%40%3Cdev.superset.apache.org%3E · WEB

Weitere Schwachstellen in apache-superset

• CVE-2026-23984MITTEL 6.5An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read…
• CVE-2026-23983MITTEL 6.5A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information. The T…
• CVE-2026-23982MITTEL 6.5An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When cre…
• CVE-2026-23980MITTEL 6.5Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated…
• CVE-2026-23969MITTEL 6.5Apache Superset utilizes a configurable dictionary, DISALLOWED_SQL_FUNCTIONS, to restrict the execution of potentially sensitive SQL functio…