CVE-2024-24773

Summary

CVE-2024-24773 is a vulnerability affecting Apache Superset versions before 3.0.4 and from 3.1.0 to 3.1.1. This issue arises due to improper handling of nested SQL statements within SQLLab. Authenticated users can exploit this flaw to bypass their designated data authorization scope. To mitigate this risk, it is advisable to upgrade to Apache Superset version 3.1.1, which addresses the vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.