Количество 2
Количество 2
CVE-2024-24773
Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1. Users are recommended to upgrade to version 3.1.1, which fixes the issue.
GHSA-5474-f7g5-273q
Apache Superset: Improper validation of SQL statements allows for unauthorized access to data
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-24773 Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1. Users are recommended to upgrade to version 3.1.1, which fixes the issue. | CVSS3: 4.9 | 0% Низкий | почти 2 года назад |
| GHSA-5474-f7g5-273q Apache Superset: Improper validation of SQL statements allows for unauthorized access to data | CVSS3: 4.9 | 0% Низкий | почти 2 года назад |
Уязвимостей на страницу