CVE-2022-27479: SQL injection vulnerability in chart data API
Published Apr 13, 2022
·Updated
Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.
Affected Software
2 affected componentsFixes available
pip/apache-superset<1.4.2
1.4.2
Apache Superset<1.4.2
Event History
Apr 13, 2022
CVE Published
via MITRE·07:05 PM
Data Sourced
via MITRE·07:05 PM
DescriptionWeakness
Apr 14, 2022
Advisory Published
12:00 AM
Frequently Asked Questions
1
What is CVE-2022-27479?
CVE-2022-27479 is a SQL injection vulnerability in Apache Superset before version 1.4.2.
2
How severe is CVE-2022-27479?
CVE-2022-27479 has a severity rating of 9.8 (critical).
3
How can I fix CVE-2022-27479?
To fix CVE-2022-27479, users should update Apache Superset to version 1.4.2 or higher.
4
What is the affected software for CVE-2022-27479?
The affected software for CVE-2022-27479 is Apache Superset versions prior to 1.4.2.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-27479?
The CWE ID for CVE-2022-27479 is CWE-89 (SQL Injection).