SQL injection in apache-superset

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-27479 · ADVISORY
• GitHub Advisory GHSA-wh73-hpcg-v32j · ADVISORY
• apache/superset · PACKAGE
• pypa/advisory-database · WEB
• lists.apache.org/thread/94th50j5d0y2fw7ysx0g7w3t6jk3z7q6 · WEB
• lists.apache.org/thread/ztb9b6jd9rngoxwvq8r4fhpp401o613y · WEB
• openwall.com/lists/oss-security/2022/04/13/3 · WEB

apache-superset のその他の脆弱性

• CVE-2026-23984中 6.5An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read…
• CVE-2026-23983中 6.5A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information. The T…
• CVE-2026-23982中 6.5An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When cre…
• CVE-2026-23980中 6.5Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated…
• CVE-2026-23969中 6.5Apache Superset utilizes a configurable dictionary, DISALLOWED_SQL_FUNCTIONS, to restrict the execution of potentially sensitive SQL functio…