QID 731108

Apache Superset is a modern, enterprise-ready business intelligence web application. It is fast, lightweight, intuitive, and loaded with options that make it easy for users of all skill sets to explore and visualize their data, from simple pie charts to highly detailed deck.gl geospatial charts.

A stored cross-site scripting (XSS) vulnerability exists in Apache Superset before 3.0.3. An authenticated attacker with create/update permissions on charts or dashboards could store a script or add a specific HTML snippet that would act as a stored XSS.

Affected Versions:
Apache Superset versions prior to 3.0.3

NOTE:
POC will be executed only if target is using default SECRET KEY

QID Detection Logic(Unauthenticated):
This QID checks for vulnerable version of Apache Superset by sending GET request to /login endpoint and extracts the version of Superset from the response.

An authenticated attacker with create/update permissions on charts or dashboards could store a script or add a specific HTML snippet that would act as a stored XSS.