Jingjing Hu

**Name of the Vulnerable Software and Affected Versions** Apache Superset versions up to and including 2.1.0 **Description** The issue is related to improper data authorization checks on Jinja templated queries, allowing an authenticated user to issue queries on database tables they may not have access to. This can potentially enable a remote attacker to gain read access to the database. **Recommendations** For Apache Superset versions up to and including 2.1.0, update to a version later than 2.1.0 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.