GHSA-787V-V9VQ-4RGV Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access

🗓️ 12 Dec 2024 15:31:09Reported by GoogleType

osv🔗 osv.dev👁 15 Views

Improper authorization in Apache Superset allows unauthorized write access via SQLLab before version 4.1.0.

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability of the Apache Superset data visualization software lies in its authentication procedures’ flaws, which allow unauthorized users to gain unauthorized access to read, modify, or delete data.	19 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-55633	12 Dec 202414:41	–	circl
CNNVD	Apache Superset 安全漏洞	12 Dec 202400:00	–	cnnvd
CVE	CVE-2024-55633	12 Dec 202414:36	–	cve
Cvelist	CVE-2024-55633 Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	12 Dec 202414:36	–	cvelist
EUVD	EUVD-2024-3442	3 Oct 202520:07	–	euvd
Github Security Blog	Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	12 Dec 202415:31	–	github
NVD	CVE-2024-55633	12 Dec 202415:15	–	nvd
OSV	BIT-SUPERSET-2024-55633 Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	5 Feb 202507:24	–	osv
OSV	CVE-2024-55633 Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	12 Dec 202414:36	–	osv

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-55633
github	www.github.com/apache/superset
lists	www.lists.apache.org/thread/bwmd17fcvljt9q4cgctp4v09zh3qs7fb
openwall	www.openwall.com/lists/oss-security/2024/12/12/1

07 Jul 2026 17:56Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5

CVSS 47.1

EPSS0.02562