Security Advisory
CVE-2024-53949
6.5
MEDIUM
Vulnerability Description
Improper Authorization vulnerability in Apache Superset when FAB_ADD_SECURITY_API is enabled (disabled by default). Allows for lower privilege users to use this API.
issue affects Apache Superset: from 2.0.0 before 4.1.0.
Users are recommended to upgrade to version 4.1.0, which fixes the issue.
Published Date
December 9, 2024
Official Source
NIST NVD Advisory