Description
Apache Superset中存在开放重定向漏洞，此漏洞是由于对用户的输入验证不正确造成的。
Apache Superset CVE-2021-28125 URL开放重定向漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-28125
https://www.cve.org/CVERecord?id=CVE-2021-28125
https://getsafety.com/vulnerabilities/SFTY-20210427-31164
https://github.com/advisories/GHSA-pfwg-rxf4-97c3
https://dbugs.ptsecurity.com/vulnerability/PT-2021-17758
https://www.encyclopedia.txone.com/en-us/threat/detail/1139463
https://cve.circl.lu/vuln/cve-2021-28125
https://advisories.gitlab.com/pkg/pypi/apache-superset/CVE-2021-28125/
https://cve.yack.one/cve/CVE-2021-28125