Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Apache Superset 2.1.2, 3.0.2 Clear all filters
TI-2023-27145 CVE-2023-49734 · GHSA-g49j-j489-3xpf

Apache Superset: Privilege Escalation Vulnerability

Priority LOW 35

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these cha…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0095 Published 2023-12-19 Fixed in 2.1.2, 3.0.2 +1 CWE-863
TI-2023-27147 CVE-2023-49736 · GHSA-jfxj-xf67-x723

Apache Superset: SQL Injection on where_in JINJA macro

Priority MEDIUM 40

A where_in JINJA macro allows users to specify a quote, which combined with a carefully crafted statement would allow for SQL injection in Apache Superset.This issue affects Apache Superset: before 2.1.2, from 3.0.0 befo…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01188 Published 2023-12-19 Fixed in 2.1.2, 3.0.2 +1 CWE-89