Apache

Session Validation attacks in Apache Superset versions up to and including 2.0.1.

Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution.

Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2.

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports.

Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's related information.

Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious.

If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset's web backend.

An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands.

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests.

While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s `o…

A stored cross-site scripting (XSS) vulnerability exists in Apache Superset before 3.0.3.

Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL.

Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery.

A where_in JINJA macro allows users to specify a quote, which combined with a carefully crafted statement would allow for SQL injection in Apache Superset.This issue affects Apache Superset: before 2.1.2, from 3.0.0 befo…

Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users.

In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated fields including the…

Improper Authorization vulnerability in Apache Superset.

Improper Authorization vulnerability in Apache Superset when FAB_ADD_SECURITY_API is enabled (disabled by default).

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these cha…

An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields.

Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.

Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with local_infile enabled.

An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API.

An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls.

This is a duplicate for CVE-2023-46104.