GHSA-v594-2c97-hx38
Apache Superset vulnerable to improper data authorization
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| PyPI | apache-superset | <= 2.1.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Improper data authorization check on Jinja templated queries in Apache Superset up to and including 2.1.0 allows for an authenticated user to issue queries on database tables they may not have access to.
References
External links from the advisory. They lead to third-party sites.