UpHeron
All vulnerabilities

Servers and applications

CVE-2024-27315

An authenticated user with privileges to create Alerts on Alerts & Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. This error is not properly handled by Apache Superset and may inadvertently surface in the error log of the Alert exposing possibly sensitive data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before…

Severity
Medium 4.3
Published
28 Feb 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
3.0.4, 3.1.1
Sources
NVD

Affected software

SoftwareAffected versions
Apache SupersetServers and applications · cpe:a:apache:superset
  • Every version before 3.0.4
  • From 3.1.0 before 3.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-27315
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-27315