Threats tagged 'bit-superset-2024-24772'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	–	EPSS 1.0%	CVE-2024-24772Apache Superset · Improper Neutralisation of custom SQL on embedded context MediumEPSS 1.0%2025-02-05GCVE DatabaseCVE-2024-24772 Apache Superset versions before 3.0.4 and from 3.1.0 before 3.1.1 contain a vulnerability where a guest user can exploit a chart data REST API to send arbitrary SQL statements. On error, this can lead to information leakage from the underlying analytics database. The issue is fixed in versions 3.0.4 and 3.1.1. EPSS 1.0%Vulnerability #bit-superset-2024-24772 #bitnami	GCVE Database	2025-02-05

Page 1 of 1