-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| apache-superset | pip | <= 2.1.0 |
Miggo AIRoot Cause AnalysisThe vulnerability centers around improper authorization in the chart import feature. Since the CWE is Incorrect Authorization (CWE-863) and the attack requires low privileges, the most likely candidate is the chart import endpoint handler. In REST APIs, CRUD operations typically map to specific view functions - the _import method in ChartRestApi would handle chart imports. The vulnerability suggests this endpoint failed to validate() admin privileges before processing import requests. This pattern matches common authorization flaws where endpoints lack proper role-based access controls.