CVE-2023-42502

Summary

CVE-2023-42502 is a vulnerability affecting Apache Superset versions prior to 3.0.0. An authenticated user with update datasets permission can exploit this issue by altering a dataset link through manipulation of the HTTP Host header. The result is a potential redirection of users to an untrusted site when accessing the affected dataset. This security weakness poses a risk of data exfiltration or other malicious actions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.