CVE-2021-42250

Advisory

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-5fp8-c45m-256p
• https://nvd.nist.gov/vuln/detail/CVE-2021-42250
• https://github.com/apache/superset/
• https://github.com/pypa/advisory-database/tree/main/vulns/apache-superset/PYSEC-2021-435.yaml
• https://lists.apache.org/thread/53lkszw6d3tybp5t99nvgcj538b9trw9
• http://www.openwall.com/lists/oss-security/2021/11/17/2
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42250