Apache Superset - Elevation of Privilege

OverviewAn attacker with access to the SQL Lab and the abuser and abuserrole tables can elevate his privileges to become administrator. DetailsOn a more general level, diverse tables who are supposed to be only readable can be modified using the WITH … AS and RETURNING keywords.Modification of th...

GHSA-F678-J579-4XF5 Apache Superset - Elevation of Privilege

Overview An attacker with access to the SQL Lab and the abuser and abuserrole tables can elevate his privileges to become administrator. Details On a more general level, diverse tables who are supposed to be only readable can be modified using the WITH … AS and RETURNING keywords. Modification of...