https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 14:35:17 +0000 https://cve.radiocsirt.org/vuln/bit-superset-2026-23982 <p><strong>Affected:</strong> Bitnami: superset</p> <p>An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to write datasets and read charts can bypass these checks by overwriting the SQL query of an existing dataset.</p> <p>This issue affects Apache Superset: before 6.0.0.</p> <p>Users are recommended to upgrade to version 6.0.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: superset</p> <p>An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to write datasets and read charts can bypass these checks by overwriting the SQL query of an existing dataset.</p> <p>This issue affects Apache Superset: before 6.0.0.</p> <p>Users are recommended to upgrade to version 6.0.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-superset-2026-23982 https://cve.radiocsirt.org/vuln/cnvd-2026-13252 cnvd-2026-13252 https://cve.radiocsirt.org/vuln/cnvd-2026-13252 https://cve.radiocsirt.org/vuln/euvd-2026-270434 EUVD-2026-270434 https://cve.radiocsirt.org/vuln/euvd-2026-270434 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23982 <p>An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to write datasets and read charts can bypass these checks by overwriting the SQL query of an existing dataset.</p> <p>This issue affects Apache Superset: before 6.0.0.</p> <p>Users are recommended to upgrade to version 6.0.0, which fixes the issue.</p> <p>An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to write datasets and read charts can bypass these checks by overwriting the SQL query of an existing dataset.</p> <p>This issue affects Apache Superset: before 6.0.0.</p> <p>Users are recommended to upgrade to version 6.0.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-23982 https://cve.radiocsirt.org/vuln/ghsa-3m2g-v7jf-7fxc <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to write datasets and read charts can bypass these checks by overwriting the SQL query of an existing dataset.</p> <p>This issue affects Apache Superset: before 6.0.0.</p> <p>Users are recommended to upgrade to version 6.0.0, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to write datasets and read charts can bypass these checks by overwriting the SQL query of an existing dataset.</p> <p>This issue affects Apache Superset: before 6.0.0.</p> <p>Users are recommended to upgrade to version 6.0.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-3m2g-v7jf-7fxc https://cve.radiocsirt.org/vuln/pysec-2026-2372 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to write datasets and read charts can bypass these checks by overwriting the SQL query of an existing dataset.</p> <p>This issue affects Apache Superset: before 6.0.0.</p> <p>Users are recommended to upgrade to version 6.0.0, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to write datasets and read charts can bypass these checks by overwriting the SQL query of an existing dataset.</p> <p>This issue affects Apache Superset: before 6.0.0.</p> <p>Users are recommended to upgrade to version 6.0.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2372 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0502 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Informationen offenzulegen, Daten zu manipulieren oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Informationen offenzulegen, Daten zu manipulieren oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0502