CVE-2022-27479

SQL injection vulnerability in chart data API

EPSS 2.7%CWE-89

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.

Affected products

Apache Software Foundation · Apache Superset

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://lists.apache.org/thread/94th50j5d0y2fw7ysx0g7w3t6jk3z7q6 https://lists.apache.org/thread/ztb9b6jd9rngoxwvq8r4fhpp401o613y http://www.openwall.com/lists/oss-security/2022/04/13/3