https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 16:57:40 +0000 https://cve.radiocsirt.org/vuln/bit-superset-2024-24779 <p><strong>Affected:</strong> Bitnami: superset</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: superset</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-superset-2024-24779 https://cve.radiocsirt.org/vuln/cnvd-2024-26535 cnvd-2024-26535 https://cve.radiocsirt.org/vuln/cnvd-2024-26535 https://cve.radiocsirt.org/vuln/euvd-2026-217240 EUVD-2026-217240 https://cve.radiocsirt.org/vuln/euvd-2026-217240 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24779 <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-24779 https://cve.radiocsirt.org/vuln/ghsa-wr6g-9wcr-cmqj <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-wr6g-9wcr-cmqj https://cve.radiocsirt.org/vuln/gsd-2024-24779 gsd-2024-24779 https://cve.radiocsirt.org/vuln/gsd-2024-24779 https://cve.radiocsirt.org/vuln/pysec-2026-1191 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1191 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0515 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0515