https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 18:37:05 +0000 https://cve.radiocsirt.org/vuln/bit-superset-2023-42502 <p><strong>Affected:</strong> Bitnami: superset</p> <p>An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.</p> <p><strong>Affected:</strong> Bitnami: superset</p> <p>An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.</p> https://cve.radiocsirt.org/vuln/bit-superset-2023-42502 https://cve.radiocsirt.org/vuln/cnvd-2023-96661 cnvd-2023-96661 https://cve.radiocsirt.org/vuln/cnvd-2023-96661 https://cve.radiocsirt.org/vuln/euvd-2026-9399 EUVD-2026-9399 https://cve.radiocsirt.org/vuln/euvd-2026-9399 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42502 <p>An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.</p> <p>An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42502 https://cve.radiocsirt.org/vuln/ghsa-hc74-9vjm-c9xv <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.</p> https://cve.radiocsirt.org/vuln/ghsa-hc74-9vjm-c9xv https://cve.radiocsirt.org/vuln/gsd-2023-42502 gsd-2023-42502 https://cve.radiocsirt.org/vuln/gsd-2023-42502 https://cve.radiocsirt.org/vuln/pysec-2026-1182 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1182 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3023 <p>Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3023