Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:10:20 +0000 CVE-2024-24779 — Apache Superset: Improper data authorization when creating a new dataset https://vulnerability.circl.lu/vuln/cve-2024-24779 <p><strong>Affected:</strong> Apache Software Foundation Apache Superset</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Superset</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/cve-2024-24779 GHSA-wr6g-9wcr-cmqj — Apache Superset: Improper data authorization when creating a new dataset https://vulnerability.circl.lu/vuln/ghsa-wr6g-9wcr-cmqj <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don&#39;t have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/ghsa-wr6g-9wcr-cmqj