VULNERABILITY INTELLIGENCE

CVE-2021-32609

CVSS score5.4 MEDIUM

EPSS probability1.65%

CISA KEVNot currently listed

Published2021-10-18

Last modified2026-06-17

Description

Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html (including scripts) into the page.