Threats tagged 'bit-superset-2024-27315'

Apache Superset contains an improper error handling vulnerability in its Alerts feature that affects versions before 3.0.4 and from 3.1.0 before 3.1.1. An authenticated user with privileges to create Alerts can craft a SQL statement that triggers a database error, which is not properly handled and may expose sensitive data in error logs. Upgrading to versions 3.0.4 or 3.1.1 resolves this issue.