cnvd - cnvd-2021-38303

cnvd-2021-38303

Vulnerability from cnvd

Title: Apache Superset输入验证错误漏洞

Description:

Apache Superset up是美国（Apache）公司的一个提供大型分布式环境中横向扩展设计应用软件。

Apache Superset 1.0.1及之前版本存在输入验证错误漏洞，该漏洞源于未检查打开重定向的用户输入，攻击者可利用该漏洞创建一个可能是恶意的外部URL。

Severity: 中

Patch Name: Apache Superset输入验证错误漏洞的补丁

Patch Description:

Apache Superset up是美国（Apache）公司的一个提供大型分布式环境中横向扩展设计应用软件。

Apache Superset 1.0.1及之前版本存在输入验证错误漏洞，该漏洞源于未检查打开重定向的用户输入，攻击者可利用该漏洞创建一个可能是恶意的外部URL。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新：https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E

Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-28125

Impacted products

Name
Apache Superset <=1.0.1

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-28125",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-28125"
    }
  },
  "description": "Apache Superset up\u662f\u7f8e\u56fd \uff08Apache\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u63d0\u4f9b\u5927\u578b\u5206\u5e03\u5f0f\u73af\u5883\u4e2d\u6a2a\u5411\u6269\u5c55\u8bbe\u8ba1\u5e94\u7528\u8f6f\u4ef6\u3002\n\nApache Superset 1.0.1\u53ca\u4e4b\u524d\u7248\u672c\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u672a\u68c0\u67e5\u6253\u5f00\u91cd\u5b9a\u5411\u7684\u7528\u6237\u8f93\u5165\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u521b\u5efa\u4e00\u4e2a\u53ef\u80fd\u662f\u6076\u610f\u7684\u5916\u90e8URL\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1ahttps://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-38303",
  "openTime": "2021-05-31",
  "patchDescription": "Apache Superset up\u662f\u7f8e\u56fd \uff08Apache\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u63d0\u4f9b\u5927\u578b\u5206\u5e03\u5f0f\u73af\u5883\u4e2d\u6a2a\u5411\u6269\u5c55\u8bbe\u8ba1\u5e94\u7528\u8f6f\u4ef6\u3002\r\n\r\nApache Superset 1.0.1\u53ca\u4e4b\u524d\u7248\u672c\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u672a\u68c0\u67e5\u6253\u5f00\u91cd\u5b9a\u5411\u7684\u7528\u6237\u8f93\u5165\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u521b\u5efa\u4e00\u4e2a\u53ef\u80fd\u662f\u6076\u610f\u7684\u5916\u90e8URL\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Apache Superset\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Apache Superset \u003c=1.0.1"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-28125",
  "serverity": "\u4e2d",
  "submitTime": "2021-04-28",
  "title": "Apache Superset\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e"
}

CVE-2021-28125 (GCVE-0-2021-28125)

Vulnerability from cvelistv5

Published

2021-04-27 09:27

Modified

2024-08-03 21:33

Severity ?

CWE

CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')

Summary

Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.

References

▼	URL	Tags
	https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E	x_refsource_MISC
	https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2021/04/27/2	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	Apache Software Foundation	Apache Superset	Version: Apache Superset <

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T21:33:17.571Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E"
          },
          {
            "name": "[superset-dev] 20210427 CVE-2021-28125: Apache Superset Open Redirect",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E"
          },
          {
            "name": "[oss-security] 20210427 CVE-2021-28125: Apache Superset Open Redirect",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/04/27/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Apache Superset",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "1.0.1",
              "status": "affected",
              "version": "Apache Superset",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Found and reported by Gianluca Veltri, Dario Castrogiovanni"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601 URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-04-27T11:08:37",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E"
        },
        {
          "name": "[superset-dev] 20210427 CVE-2021-28125: Apache Superset Open Redirect",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E"
        },
        {
          "name": "[oss-security] 20210427 CVE-2021-28125: Apache Superset Open Redirect",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/04/27/2"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Apache Superset Open Redirect ",
      "workarounds": [
        {
          "lang": "en",
          "value": "https://github.com/apache/superset/pull/13461"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@apache.org",
          "ID": "CVE-2021-28125",
          "STATE": "PUBLIC",
          "TITLE": "Apache Superset Open Redirect "
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Apache Superset",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "Apache Superset",
                            "version_value": "1.0.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apache Software Foundation"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Found and reported by Gianluca Veltri, Dario Castrogiovanni"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-601 URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E",
              "refsource": "MISC",
              "url": "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E"
            },
            {
              "name": "[superset-dev] 20210427 CVE-2021-28125: Apache Superset Open Redirect",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434@%3Cdev.superset.apache.org%3E"
            },
            {
              "name": "[oss-security] 20210427 CVE-2021-28125: Apache Superset Open Redirect",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/04/27/2"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "https://github.com/apache/superset/pull/13461"
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2021-28125",
    "datePublished": "2021-04-27T09:27:22",
    "dateReserved": "2021-03-10T00:00:00",
    "dateUpdated": "2024-08-03T21:33:17.571Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted