漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Apache Superset: Improper authorization validation on dashboards and charts import
Vulnerability Description
A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it's important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
授权机制不正确
Vulnerability Title
Apache Superset 安全漏洞
Vulnerability Description
Apache Superset是美国阿帕奇（Apache）基金会的一个数据可视化和数据探索平台。 Apache Superset 3.0.4 之前、3.1.0 到 3.1.1 版本存在安全漏洞，该漏洞源于低权限的用户可以导入他们无权访问的现有仪表板或图表，然后修改其元数据，从而获得该对象的所有权。
CVSS Information
N/A
Vulnerability Type
N/A