https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 20:47:13 +0000 https://cve.radiocsirt.org/vuln/cve-2024-34693 <p><strong>Affected:</strong> Apache Software Foundation Apache Superset</p> <p>Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with local_infile enabled. If both the MariaDB server (off by default) and the local mysql client on the web server are set to allow for local infile, it&#39;s possible for the attacker to execute a specific MySQL/MariaDB SQL command that is able to read files from the server and insert their content on a MariaDB database table.This issue affects Apache Superset: before 3.1.3 and version 4.0.0</p> <p>Users are recommended to upgrade to version 4.0.1 or 3.1.3, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Superset</p> <p>Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with local_infile enabled. If both the MariaDB server (off by default) and the local mysql client on the web server are set to allow for local infile, it&#39;s possible for the attacker to execute a specific MySQL/MariaDB SQL command that is able to read files from the server and insert their content on a MariaDB database table.This issue affects Apache Superset: before 3.1.3 and version 4.0.0</p> <p>Users are recommended to upgrade to version 4.0.1 or 3.1.3, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2024-34693 https://cve.radiocsirt.org/vuln/pysec-2026-1183 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with local_infile enabled. If both the MariaDB server (off by default) and the local mysql client on the web server are set to allow for local infile, it&#39;s possible for the attacker to execute a specific MySQL/MariaDB SQL command that is able to read files from the server and insert their content on a MariaDB database table. This issue affects Apache Superset before version 3.1.3 and in version 4.0.0.</p> <p>Users are recommended to upgrade to version 4.0.1 or 3.1.3, both of which fix the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with local_infile enabled. If both the MariaDB server (off by default) and the local mysql client on the web server are set to allow for local infile, it&#39;s possible for the attacker to execute a specific MySQL/MariaDB SQL command that is able to read files from the server and insert their content on a MariaDB database table. This issue affects Apache Superset before version 3.1.3 and in version 4.0.0.</p> <p>Users are recommended to upgrade to version 4.0.1 or 3.1.3, both of which fix the issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1183