CVE-2021-32609 — XSS vulnerability on Explore page
Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious titl…
Published: 2021-10-18 · CVSS: Unscored
Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html (including scripts) into the page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7