Low WID-SEC-2024-1059 1 CVE

Apache Superset: Schwachstelle ermöglicht Offenlegung von Informationen

Published May 7, 2024 · Updated May 7, 2024 · de-DE

Vendor: Apache Product: Superset Platform: Linux Platform: macOS

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Superset ausnutzen, um Informationen offenzulegen.

Product

Apache Superset ist eine Open-Source-Plattform zur Datenexploration und -visualisierung.

Vulnerabilities 1

Medium 4.3

CVE-2024-28148

Apache Superset: Incorrect datasource authorization on explore REST API

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request.This issue affects Apache Superset: before 3.1.2. Users are recommended to upgrade to version 3.1.2 or above, wh…

Apache Software Foundation Apache Superset apache-superset PyPI

May 7, 2024

Revision history

2024-05-07 #1
Initiale Fassung

References

GitHub Advisory Database vom 2024-05-07
https://github.com/advisories/GHSA-299q-3p96-5898
OSS-Sec Mailing List vom 2024-05-07
https://seclists.org/oss-sec/2024/q2/216