CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Apache. It involves a SQL injection risk.
CVE
CVE-2023-49736
Severity
MEDIUM
CVSS
6.5
EPSS
1.18%
Apache
Original NVD Description
A where_in JINJA macro allows users to specify a quote, which combined with a carefully crafted statement would allow for SQL injection in Apache Superset.This issue affects Apache Superset: before 2.1.2, from 3.0.0 before 3.0.2. Users are recommended to upgrade to version 3.0.2, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)