apache-superset vulnerabilities (PyPI)
66 vulnerabilities.
-
apache-supersetPyPI Apache Superset: Exposure of Sensitive Information via Incomplete ClickHouse Function Filtering 5.3 Medium -
apache-supersetPyPI Apache Superset: Improper Neutralization of Special Elements used in a SQL Command 5.3 Medium -
apache-supersetPyPI Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass 7.1 High -
apache-supersetPyPI Apache Superset: Sensitive Data Exposure via REST API (disabled by default) 2.3 Low -
apache-supersetPyPI Apache Superset: SQLLab Read-Only Bypass on PostgreSQL 7.1 High -
apache-supersetPyPI Apache Superset: Incorrect datasource authorization on REST API 5.3 Medium -
apache-supersetPyPI Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions 5.3 Medium -
apache-supersetPyPI Apache Superset: Stored XSS on charts metadata 5.3 Medium -
apache-supersetPyPI Apache Superset: Metadata exposure in embedded charts 5.3 Medium -
apache-supersetPyPI Apache Superset: Improper authorization bypass on row level security via SQL Injection 7.1 High -
apache-supersetPyPI Apache Superset: Incorrect authorization leading to resource ownership takeover 5.3 Medium -
apache-supersetPyPI Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access 7.1 High -
apache-supersetPyPI Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled 7.6 High -
apache-supersetPyPI Apache Superset: Error verbosity exposes metadata in analytics databases 5.3 Medium -
apache-supersetPyPI Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions 2.3 Low -
apache-supersetPyPI Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions 4.3 Medium -
apache-supersetPyPI Apache Superset: Server arbitrary file read 6.8 Medium -
apache-supersetPyPI Apache Superset: Incorrect datasource authorization on explore REST API 4.3 Medium -
apache-supersetPyPI Apache Superset: Improper authorization validation on dashboards and charts import 4.3 Medium -
apache-supersetPyPI Apache Superset: Improper data authorization when creating a new dataset 5.0 Medium -
apache-supersetPyPI Apache Superset: Improper Neutralisation of custom SQL on embedded context 4.3 Medium -
apache-supersetPyPI Apache Superset: Improper validation of SQL statements allows for unauthorized access to data 4.9 Medium -
apache-supersetPyPI Apache Superset: Improper error handling on alerts 4.3 Medium -
apache-supersetPyPI Apache Superset: Stored XSS in Dashboard Title and Chart Title 9.6 Critical -
apache-supersetPyPI Apache Superset: Privilege Escalation Vulnerability 7.7 High -
apache-supersetPyPI Apache Superset: SQL Injection on where_in JINJA macro 6.5 Medium -
apache-supersetPyPI Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb 6.5 Medium -
apache-supersetPyPI Apache Superset: Lack of rate limiting allows for possible denial of service 5.8 Medium -
apache-supersetPyPI Apache Superset: Sensitive information disclosure on db connection details 4.3 Medium -
apache-supersetPyPI Apache Superset: Open Redirect Vulnerability 4.8 Medium -
apache-supersetPyPI Apache Superset: Stored XSS on API endpoint 4.3 Medium -
apache-supersetPyPI Apache Superset: Unnecessary read permissions within the Gamma role 4.3 Medium -
apache-supersetPyPI Apache Superset: Privilege escalation with default examples database 6.3 Medium -
apache-supersetPyPI Apache Superset: SQL parser edge case bypasses data access authorization 4.3 Medium -
apache-supersetPyPI Apache Superset: Metadata db write access can lead to remote code execution 6.6 Medium -
apache-supersetPyPI Apache Superset: Possible Unauthorized Registration of SQLite Database Connections 3.8 Low -
apache-supersetPyPI Apache Superset: Stack traces enabled by default 4.3 Medium -
apache-supersetPyPI Apache Superset: Improper data permission validation on Jinja templated queries 5.0 Medium -
apache-supersetPyPI Apache Superset: Improper API permission for low privilege users allows for SSRF 4.3 Medium -
apache-supersetPyPI Apache Superset: Improper Authorization check on import charts 4.3 Medium -
apache-supersetPyPI Apache Superset: Improper API permission for low privilege users 5.4 Medium -
apache-supersetPyPI Apache Superset: Database connection password leak 4.9 Medium -
apache-supersetPyPI Apache Superset: Session validation vulnerability when using provided default SECRET_KEY 8.9 High -
apache-supersetPyPI Apache Superset: Possible SSRF on import datasets 4.9 Medium -
apache-supersetPyPI Apache Superset: Incorrect default permissions for Gamma role 3.1 Low -
apache-supersetPyPI Apache Superset: SQL injection vulnerability in adhoc clauses 5.4 Medium -
apache-supersetPyPI Apache Superset: Dashboard metadata information leak 5.3 Medium -
apache-supersetPyPI Apache Superset: Open Redirect Vulnerability 5.4 Medium -
apache-supersetPyPI Apache Superset: Improper rendering of user input 5.4 Medium -
apache-supersetPyPI Apache Superset: Cross Site Request Forgery (CSRF) on accept, request access API 8.8 High - Show olderLoading…