Overview
Apache Superset: Improper validation of SQL statements allows for unauthorized access to data
Advisory
Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope.
Affected Package
Also affects
---
How to Fix
Upgradeapache-supersetto3.0.43.1.1or higher.
Mitigation and Workarounds
---
Vulnerable Functions
Functions linked to known vulnerabilities.
Verified by Safety
Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.
Learn more