CVE-2022-43719: Apache Superset

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

Affected products

• Apache Superset: up to and including 1.5.2; version 2.0.0 only

Published 2023-01-16. Last modified 2026-06-17.