What’s Vulnerable › Vulnerabilities

CVE-2022-43721: Apache Superset: Open Redirect Vulnerability

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-16 · updated 2026-06-17
• Weakness: CWE-601

Description

An authenticated attacker with update datasets permission could change a dataset link to an untrusted site, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Affected products

• Apache Superset: through 1.5.2; 2.0.0, 2.0.0-rc1, 2.0.0-rc2

References

• https://lists.apache.org/thread/s6sqt5jmcv6qxtvdot1t5tpt57v439kg
• https://lists.apache.org/thread/s6sqt5jmcv6qxtvdot1t5tpt57v439kg

Get alerted when CVE-2022-43721 or the next vulnerability affects your stack