CVE-2022-43719

—

CVSS 3.1

8.8 high

EPSS

<1%p45

Published

Jan 16, 2023 (Jan 16, 2023)

Modified

Jun 17, 2026

Description

Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Vendors: apache
Products: superset
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.