CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Apache. Its EPSS score suggests a 63.8% probability of exploitation in the next 30 days.
CVE
CVE-2021-28125
Severity
MEDIUM
CVSS
6.1
EPSS
63.77%
Apache
Original NVD Description
Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.
Related CVEs
Other vulnerabilities affecting the same vendor(s)