{"id":"CVE-2021-41971","published":"2021-10-18T14:30:14Z","modified":"2024-08-04T03:22:25Z","title":"Possible SQL Injection when template processing is enabled","vendor":"Apache","product":"Apache Superset","tier":"tail","description":{"text":"Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01765,"percentile":0.77974,"provenance":"source"},"cwes":[{"id":"CWE-89","name":"Improper Neutralization of Special Elements used in an SQL Command"}],"references":[{"url":"https://lists.apache.org/thread.html/rf7292731268c6c6e2196ae1583e32ac7189385364268f8d9215e8e6d%40%3Cdev.superset.apache.org%3E","tags":["x_refsource_MISC"]}],"priority":{"score":15.6,"factors":[{"name":"EPSS percentile","points":15.59}]},"vendorSlug":"apache","affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache Superset","versions":[">= Apache Superset, < 1.3.1"]}],"affected":[{"ecosystem":"PyPI","package":"apache-superset","vulnerableRanges":["<1.3.1"],"patched":["1.3.1"],"from":["GHSA-pg8m-4p8j-2p56","PYSEC-2021-378"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-0022","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2021-27907","published":"2021-03-05","fixed":"0.38.1","kev":false},{"cve":"CVE-2021-28125","published":"2021-04-27","fixed":"1.1.0","kev":false},{"cve":"CVE-2021-32609","published":"2021-10-18","fixed":"1.2.0","kev":false,"link":{"from":"CVE-2021-32609","to":"CVE-2021-41971","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:apache-superset","fromFixed":"1.2.0","toFixed":"1.3.1","daysApart":0}]}},{"cve":"CVE-2021-41971","published":"2021-10-18","fixed":"1.3.1","kev":false},{"cve":"CVE-2021-41972","published":"2021-11-12","fixed":"1.3.2","kev":false,"link":{"from":"CVE-2021-41971","to":"CVE-2021-41972","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:apache-superset","fromFixed":"1.3.1","toFixed":"1.3.2","daysApart":25}]}},{"cve":"CVE-2021-42250","published":"2021-11-17","fixed":"1.3.2","kev":false,"link":{"from":"CVE-2021-41971","to":"CVE-2021-42250","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:apache-superset","fromFixed":"1.3.1","toFixed":"1.3.2","daysApart":30}]}},{"cve":"CVE-2021-44451","published":"2022-02-01","fixed":"1.4.0","kev":false}],"package":"PyPI:apache-superset"}}