| Package | Affected versions | Patched versions |
|---|---|---|
| apache-superset | < 1.1.0 | 1.1.0 |
| superset | ≤ 0.34.0 | |
| superset | ≤ 1.0.1 |
Apache Superset prior to 1.1.0 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free