← CVE Intelligence

CVE-2022-43719

Apache Superset: Cross Site Request Forgery (CSRF) on accept, request access API PUBLISHED

Description (CNA)

Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Supersetaffected 2.0.0 before 2.0.1; affected 0 through 1.5.2

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.