2.1.3

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-28	CVE-2024-27315	Unspecified vulnerability in Apache Superset An authenticated user with privileges to create Alerts on Alerts & Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. network low complexity apache	4.3
2023-11-28	CVE-2023-42504	Unspecified vulnerability in Apache Superset An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0 network low complexity apache	6.5
2023-11-28	CVE-2023-42505	Unspecified vulnerability in Apache Superset An authenticated user with read permissions on database connections metadata could potentially access sensitive information such as the connection's username. This issue affects Apache Superset before 3.0.0. network low complexity apache	4.3