Lucene search
+L

10 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•26 views

Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine

Apache Superset utilizes a configurable dictionary, DISALLOWEDSQLFUNCTIONS, to restrict the execution of potentially sensitive SQL functions within SQL Lab and charts. While this feature included restrictions for engines like PostgreSQL, a vulnerability was reported where the default list for the...

6.5CVSS6AI score0.00617EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder