CVE-2022-43719

CVE-2022-43719: Apache Superset: Cross Site Request Forgery (CSRF) on accept, request access API

Vendor Apache Software Foundation
Product Apache Superset
Weakness CWE-352 · CSRF
Published January 16, 2023
Last update April 7, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

Description

Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Key dates

Disclosure timeline

January 16, 2023 CVE published
April 7, 2025 Record updated