CVE-2024-55633 Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access

🗓️ 12 Dec 2024 14:36:02Reported by GoogleType

osv🔗 osv.dev👁 11 Views

Improper Authorization in Apache Superset could allow execution of crafted SQL statements. Upgrade advised.

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability of the Apache Superset data visualization software lies in its authentication procedures’ flaws, which allow unauthorized users to gain unauthorized access to read, modify, or delete data.	19 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-55633	12 Dec 202414:41	–	circl
CNNVD	Apache Superset 安全漏洞	12 Dec 202400:00	–	cnnvd
CVE	CVE-2024-55633	12 Dec 202414:36	–	cve
Cvelist	CVE-2024-55633 Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	12 Dec 202414:36	–	cvelist
EUVD	EUVD-2024-3442	3 Oct 202520:07	–	euvd
Github Security Blog	Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	12 Dec 202415:31	–	github
NVD	CVE-2024-55633	12 Dec 202415:15	–	nvd
OSV	BIT-SUPERSET-2024-55633 Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	5 Feb 202507:24	–	osv
OSV	GHSA-787V-V9VQ-4RGV Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	12 Dec 202415:31	–	osv

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/12/12/1
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55633.json
lists	www.lists.apache.org/thread/bwmd17fcvljt9q4cgctp4v09zh3qs7fb
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-55633

15 Jul 2026 01:49Current

6.7Medium risk

Vulners AI Score6.7

CVSS 47.1

EPSS0.02562