CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It affects Apache. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-42502
Severity
MEDIUM
CVSS
4.8
EPSS
0.82%
Apache
Original NVD Description
An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)