Medium severity6.5NVD Advisory· Published Nov 17, 2021· Updated Jun 17, 2026
CVE-2021-42250
CVE-2021-42250
Description
Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
apache-supersetPyPI | < 1.3.2 | 1.3.2 |
Affected products
4- osv-coords2 versions
< 1.3.2+ 1 more
- (no CPE)range: < 1.3.2
- (no CPE)range: < 1.3.2
Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2021/11/17/2nvdMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-5fp8-c45m-256pghsaADVISORY
- lists.apache.org/thread/53lkszw6d3tybp5t99nvgcj538b9trw9nvdMailing ListVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-42250ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/apache-superset/PYSEC-2021-435.yamlghsaWEB
News mentions
0No linked articles in our index yet.