CVE-2021-41971

HIGH · CVSS 8.8 EPSS 1.71%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-10-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-41971

Severity

HIGH

CVSS

8.8

EPSS

1.71%

Apache

Original NVD Description

Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL.