ID: CVE-2024-28148
Published: 2024-05-07T14:15Z
Description: description_data: An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request.This issue affects Apache Superset: before 3.1.2.

Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.


CWE: problemtype_data: description: CWE-863