Lucene search
+L

1 matches found

PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Superset. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. This issue is a follow-up toCVE-2024-39887 wi...

9.8CVSS6AI score0.00836EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder