https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 19:43:04 +0000 https://cve.radiocsirt.org/vuln/bit-superset-2024-26016 <p><strong>Affected:</strong> Bitnami: superset</p> <p>A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it&#39;s important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: superset</p> <p>A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it&#39;s important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-superset-2024-26016 https://cve.radiocsirt.org/vuln/cnvd-2024-26536 cnvd-2024-26536 https://cve.radiocsirt.org/vuln/cnvd-2024-26536 https://cve.radiocsirt.org/vuln/euvd-2026-232488 EUVD-2026-232488 https://cve.radiocsirt.org/vuln/euvd-2026-232488 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26016 <p>A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it&#39;s important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.</p> <p>A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it&#39;s important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-26016 https://cve.radiocsirt.org/vuln/ghsa-3v9r-885j-762g <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it&#39;s important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it&#39;s important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-3v9r-885j-762g https://cve.radiocsirt.org/vuln/gsd-2024-26016 gsd-2024-26016 https://cve.radiocsirt.org/vuln/gsd-2024-26016 https://cve.radiocsirt.org/vuln/pysec-2026-1158 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it&#39;s important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it&#39;s important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1158 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0515 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0515