-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| apache-superset | pip | < 1.5.1 | 1.5.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from improper privilege checks when handling dataset ownership. The key fix in the patch removes the conditional OLD_API_CHECK_DATASET_OWNERSHIP check and consistently enforces ownership validation through check_ownership(). The vulnerable version's save() function in views.py had two code paths for ownership handling, with the legacy path failing to properly verify user privileges. This allowed authenticated users to manipulate dataset metadata without proper authorization.
PythonPythonKEV Misses 88% of Exploited CVEs- Get the report