Lucene search
Veracode Vulnerability DatabaseVERACODE:27283HistorySep 30, 2020 - 12:47 a.m.
SQL Injection
2020-09-3000:47:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
apache superset
sql injection
vulnerability
arbitrary sql statements
groupby
columns
filters
metrics
EPSS
0.001
Percentile
29.5%
apache-superset is vulnerable to SQL injection. The vulnerability allows an attacker to inject and execute arbitrary SQL statements using invalid column names in groupby, columns, filters, or metrics queries.
Related
osv
osv
CVE-2020-13952
2020-09-30 21:15:12
Plaintext password leak in Apache Superset
2021-04-30 17:34:03
PYSEC-2020-223
2020-09-30 21:15:00
github
github
Plaintext password leak in Apache Superset
2021-04-30 17:34:03
cve
cve
CVE-2020-13952
2020-09-30 21:15:12
cvelist
cvelist
CVE-2020-13952
2020-09-30 20:48:57
nvd
nvd
CVE-2020-13952
2020-09-30 21:15:12
prion
prion
Design/Logic Flaw
2020-09-30 21:15:00