Apache Superset Resource Management Error Vulnerability (CNVD-2024-14775)

2024-03-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache superset

data visualization

data exploration

resource management

vulnerability

uncontrolled resource consumption

authenticated attacker

malicious zip

apache foundation

cnvd-2024-14775

AI Score

6.8

Confidence

Low

EPSS

Percentile

15.5%

JSON

Apache Superset is a data visualization and data exploration platform from the Apache (USA) Foundation. A resource management error vulnerability exists in Apache Superset versions 2.1.2 and earlier, 3.0.0, and 3.0.1, which stems from uncontrolled resource consumption by the application, and can be exploited by an authenticated attacker to upload a malicious ZIP that may trigger uncontrolled resource consumption.