CVE-2021-42250

CVE-2021-42250: Possible log injection

Vendor Apache Software Foundation
Product Apache Superset
Weakness CWE-117
Published November 17, 2021
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.

Key dates

02Disclosure timeline

November 17, 2021 CVE published
August 4, 2024 Record updated