Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-28148
4.3
MEDIUMCVSS v3
Published
May 7, 2024
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request.This issue affects Apache Superset: before 3.1.2. Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.
apache/superset
GitHubApache Superset is a Data Visualization and Data Exploration Platform
GitHubApache Superset is a Data Visualization and Data Exploration Platform< 4.0.0, < 3.1.2NVD