← Database

CVE-2022-27479

CRITICAL CVSS: 9.8 Published: 2022-04-13 Modified: 2026-06-17

Description

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.

Affected Platforms

Apache Superset

Weakness Type

CWE-89, CWE-89

References