[Git][security-tracker-team/security-tracker][master] Superset references

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7cbd3752 by Moritz Muehlenhoff at 2023-01-17T11:47:06+01:00
Superset references

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21152,12 +21152,15 @@ CVE-2022-43721 (An authenticated attacker with update datasets permission could
 	NOT-FOR-US: Apache Superset
 CVE-2022-43720 (An authenticated attacker with write CSS template permissions can crea ...)
 	NOT-FOR-US: Apache Superset
+	NOTE: https://github.com/apache/superset/pull/21853
 CVE-2022-43719 (Two legacy REST API endpoints for approval and request access are vuln ...)
 	NOT-FOR-US: Apache Superset
+	NOTE: https://github.com/apache/superset/pull/22022
 CVE-2022-43718 (Upload data forms do not correctly render user input leading to possib ...)
 	NOT-FOR-US: Apache Superset
 CVE-2022-43717 (Dashboard rendering does not sufficiently sanitize the content of mark ...)
 	NOT-FOR-US: Apache Superset
+	NOTE: https://github.com/apache/superset/pull/21895
 CVE-2022-43716
 	RESERVED
 CVE-2022-43715



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7cbd37522bd518cecf2c2e94149fb56d116e815d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7cbd37522bd518cecf2c2e94149fb56d116e815d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230117/94886f5b/attachment-0001.htm>