CVE-2024-26016
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Feb 28, 2024
Updated: Dec 31, 2024
CWE ID 863
Summary
CVE-2024-26016 is a vulnerability in Apache Superset that allows a low-privilege authenticated user to gain ownership of existing dashboards or charts by modifying their metadata. Although this issue does not grant direct access to the analytical data, it pose a risk to the affected version of Apache Superset, which includes those before 3.0.4 and from 3.1.0 before 3.1.1. Users are advised to upgrade to version 3.1.1 to address this vulnerability and secure their systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Apache Superset
Affected Vendors
- Apache Software Foundation
- Apache Corporation