Apache Superset Unauthorized Access Vulnerability

Apache Superset is a Python language based development of open source fashionable data exploration and analysis and visualization of the reporting platform , support for rich data sources , and has a colorful visualization of the charts to choose from . An unauthorized access vulnerability exists in Apache Superset 2.1.0 and prior versions. The vulnerability is caused by a failure to perform proper data authorization checks on Jinja template queries, which allows authenticated users to issue queries against database tables to which they may not have access. An attacker could exploit this vulnerability to launch an attack and obtain sensitive information.