Product

Superset (< 3.1.3)

1 brief RSS

Arbitrary File Read in Apache Superset via CVE-2024-34693

CVE-2024-34693 is an arbitrary file read vulnerability in Apache Superset (versions < 3.1.3 and 4.0.1) that allows authenticated attackers to leverage rogue MariaDB servers and the LOAD DATA LOCAL INFILE command to exfiltrate sensitive files.

Superset +1 apache cve-2024-34693 arbitrary-file-read authenticated-access

1t 1c 1h ago