Security Advisory

CVE-2025-27696

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-05-13 08:21:21

Last updated 2025-09-01 09:52:53

Assigner apache

CVSS score 5.3

State PUBLISHED

Description

Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions. This issue affects Apache Superset: through 4.1.1. Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue.

← Browse all CVEs View on cve.org ↗