CVE-2018-8021
2 advisories.
PyPI/superset CVE-2018-8021: critical 9.8
Deserialization of Untrusted Data in superset
Action: Upgrade superset to 0.23 or later.
pip install superset==0.23Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.23 | - |
Fixed versions
| 0.23 |
Sources
- osv: GHSA-vxp9-wv2f-wqmw
- https://nvd.nist.gov/vuln/detail/CVE-2018-8021
- https://github.com/apache/incubator-superset/pull/4243
- https://github.com/apache/superset/pull/4243
- https://github.com/apache/superset/commit/2c72a7ae4fc0a8bac1f037a79efa90e1c5549710
- https://github.com/advisories/GHSA-vxp9-wv2f-wqmw
- https://github.com/apache/superset
- https://github.com/pypa/advisory-database/tree/main/vulns/superset/PYSEC-2018-74.yaml
- https://www.exploit-db.com/exploits/45933
CVE-2018-8021 · published · modified · JSON
PyPI/superset CVE-2018-8021: unknown
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Supers
Action: Upgrade superset to 0.23.0 or later.
pip install superset==0.23.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.23.0 | - |
Fixed versions
| 0.23.0 |
Sources
- osv: PYSEC-2018-74
- https://github.com/apache/incubator-superset/pull/4243
- https://www.exploit-db.com/exploits/45933/
- https://github.com/advisories/GHSA-vxp9-wv2f-wqmw
CVE-2018-8021 · published · modified · JSON