CVE-2024-24772

Summary

CVE-2024-24772 is a vulnerability affecting Apache Superset's chart data REST API. A guest user can exploit this issue by sending arbitrary SQL statements, which, on error, may leak information from the underlying analytics database. This issue poses a risk for versions before 3.0.4 and from 3.1.0 before 3.1.1. To mitigate this vulnerability, users are advised to upgrade to either version 3.1.1 or 3.0.4, which have been released with the necessary fixes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.