CVE-2025-55672

A stored Cross-Site Scripting (XSS) vulnerability exists in Apache Superset's chart visualization. An authenticated user with permissions to edit charts can inject a malicious payload into a column's label. The payload is not properly sanitized and gets executed in the victim's browser when they hover over the chart, potentially leading to session hijacking or the execution of arbitrary commands on behalf of the user. This issue affects Apache Superset: before 5.0.0. Users are recommended to upgrade to version 5.0.0, which fixes the issue.

• CWE-80

• https://lists.apache.org/thread/rvh7fdjfzxzjhcfwoz7twc2brhvochdjMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2025/08/14/4

Published

Aug 14, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-55664A heap buffer overflow in the m2tsdmx_send_packet function (…5.5
• CVE-2025-55668Session Fixation vulnerability in Apache Tomcat via rewrite …6.5
• CVE-2025-55669When the BIG-IP Advanced WAF and ASM security policy and a s…8.7
• CVE-2025-5567The WP Shortcodes Plugin — Shortcodes Ultimate plugin for Wo…5.4
• CVE-2025-55670On BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kub…7.1
• CVE-2025-55671Uncontrolled search path element issue exists in TkEasyGUI v…8.5
• CVE-2025-55673When a guest user accesses a chart in Apache Superset, the A…4.3
• CVE-2025-55674A bypass of the DISALLOWED_SQL_FUNCTIONS security feature in…6.5
• CVE-2025-55675Apache Superset contains an improper access control vulnerab…6.5
• CVE-2025-55676Generation of error message containing sensitive information…5.5
• CVE-2025-55677Untrusted pointer dereference in Windows Device Association …7.8
• CVE-2025-55678Use after free in Windows DirectX allows an authorized attac…7