Skip to content
Threat Feed
Subscribe

Tag

Superset

1 brief RSS
low advisory

Arbitrary File Read in Apache Superset via CVE-2024-34693

CVE-2024-34693 is an arbitrary file read vulnerability in Apache Superset (versions < 3.1.3 and 4.0.1) that allows authenticated attackers to leverage rogue MariaDB servers and the LOAD DATA LOCAL INFILE command to exfiltrate sensitive files.

Superset +1 apache cve-2024-34693 arbitrary-file-read authenticated-access
1t 1c