CVE-2024-24772

Summary

CVE-2024-24772 is a vulnerability in Apache Superset, affecting versions before 3.0.4 and from 3.1.0 before 3.1.1. A guest user can exploit the chart data REST API, sending arbitrary SQL statements that could potentially leak information from the underlying analytics database upon error. To mitigate this risk, it is advised to upgrade to version 3.1.1 or 3.0.4, which addresses the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.