Threats tagged 'bit-superset-2026-23980'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.7%	CVE-2026-23980Apache Superset · SQL Injection Medium5.3EPSS 0.7%2026-02-24CVE Database V5CVE-2026-23980 Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to conduct error-based SQL injection via the sqlExpression or where parameters. This issue affects Apache Superset: before 6.0.0. Users are recommended to upgrade to version 6.0.0, which fixes the issue. EPSS 0.7%Vulnerability Apache Software Foundation CWE-89 #bit-superset-2026-23980 #bitnami	CVE Database V5	2026-02-24

Page 1 of 1