Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2026-23984 · ADVISORY
• apache/superset · PACKAGE
• lists.apache.org/thread/72cmgxtvp9pclto4ln1chbs1227nwd26 · WEB
• openwall.com/lists/oss-security/2026/02/24/8 · WEB
• pypi.org/project/apache-superset · PACKAGE
• GitHub Advisory GHSA-mwf2-qr4v-94h2 · ADVISORY

Lỗ hổng khác của apache-superset

• CVE-2026-23983TRUNG BÌNH 6.5A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information. The T…
• CVE-2026-23982TRUNG BÌNH 6.5An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When cre…
• CVE-2026-23980TRUNG BÌNH 6.5Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated…
• CVE-2026-23969TRUNG BÌNH 6.5Apache Superset utilizes a configurable dictionary, DISALLOWED_SQL_FUNCTIONS, to restrict the execution of potentially sensitive SQL functio…
• CVE-2025-55675TRUNG BÌNH 6.5Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenti…