Threats tagged 'bit-superset-2024-53949'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 0.7%	CVE-2024-53949Apache Superset · Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled HighEPSS 0.7%2025-02-05GCVE DatabaseCVE-2024-53949 Apache Superset contains an improper authorization vulnerability when the FAB_ADD_SECURITY_API feature is enabled, which is disabled by default. This flaw allows lower privilege users to create roles via the security API. The issue affects versions from 2.0.0 up to but not including 4.1.1. Upgrading to version 4.1.0 or later resolves the vulnerability. EPSS 0.7%Vulnerability #bit-superset-2024-53949 #bitnami	GCVE Database	2025-02-05

Page 1 of 1