← CVE Intelligence

CVE-2021-41971

Possible SQL Injection when template processing is enabled PUBLISHED

Description (CNA)

Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Supersetaffected Apache Superset before 1.3.1

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.