Apache Software Foundation Apache Superset

• CVE-2022-43721 Medium 5.4 Apache Superset: Open Redirect Vulnerability 1.0%
• CVE-2022-43720 Medium 5.4 Apache Superset: Improper rendering of user input 1.3%
• CVE-2022-43719 High 8.8 Apache Superset: Cross Site Request Forgery (CSRF) on accept, request access API 0.6%
• CVE-2022-43718 Medium 5.4 Apache Superset: Cross-Site Scripting vulnerability on upload forms 1.2%
• CVE-2022-43717 Medium 5.4 Apache Superset: Cross-Site Scripting on dashboards 1.3%
• CVE-2021-37839 Unrated Improper access to dataset metadata information 1.4%
• CVE-2022-27479 Unrated SQL injection vulnerability in chart data API 2.9%
• CVE-2021-44451 Unrated API sensitive information leak 7.9%
• CVE-2021-42250 Unrated Possible log injection 1.8%
• CVE-2021-41972 Unrated Credentials leak 1.5%
• CVE-2021-41971 Unrated Possible SQL Injection when template processing is enabled 1.8%
• CVE-2021-32609 Unrated XSS vulnerability on Explore page 1.7%
• CVE-2021-28125 Unrated Apache Superset Open Redirect 64.0%
• CVE-2021-27907 Unrated Apache Superset stored XSS on Dashboard markdown 86.4%
• CVE-2020-1932 Unrated An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed pas 1.4%