https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T17:30:26.836981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-superset-2023-42502 BIT-superset-2023-42502 — Apache Superset: Open Redirect Vulnerability 2026-10-14T17:30:26.891153+00:00

Affected: Bitnami: superset

An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.

 https://cve.radiocsirt.org/vuln/cnvd-2023-96661 cnvd-2023-96661 2026-10-14T17:30:26.891204+00:00 cnvd-2023-96661 https://cve.radiocsirt.org/vuln/euvd-2026-9399 EUVD-2026-9399 2026-10-14T17:30:26.891222+00:00 EUVD-2026-9399 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42502 fkie_cve-2023-42502 2026-10-14T17:30:26.891234+00:00

An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.

 https://cve.radiocsirt.org/vuln/ghsa-hc74-9vjm-c9xv GHSA-hc74-9vjm-c9xv — Apache Superset Open Redirect vulnerability 2026-10-14T17:30:26.891255+00:00

Affected: PyPI: apache-superset

An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.

 https://cve.radiocsirt.org/vuln/gsd-2023-42502 gsd-2023-42502 2026-10-14T17:30:26.891276+00:00 gsd-2023-42502 https://cve.radiocsirt.org/vuln/pysec-2026-1182 PYSEC-2026-1182 — Apache Superset Open Redirect vulnerability 2026-10-14T17:30:26.891287+00:00

Affected: PyPI: apache-superset

An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3023 WID-SEC-W-2023-3023 — Apache Superset: Mehrere Schwachstellen 2026-10-14T17:30:26.891304+00:00

Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.