CVEvulnerability

CVE-2022-43719

8.8 HIGH Published 2023-01-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-352

Description

Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Affected configurations

• apache superset (<= 1.5.2) • apache superset 2.0.0

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References