CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Apache. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-43720
Severity
MEDIUM
CVSS
5.4
EPSS
1.24%
Apache
Original NVD Description
An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get properly escaped by the toast message displayed when a user deletes that specific CSS template record. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)