Dlt1412

**Name of the Vulnerable Software and Affected Versions** Apache Superset versions prior to 3.0.4 Apache Superset versions 3.1.0 through 3.1.0 **Description** The issue allows users with custom roles that include `can write on dataset` and without all data access permissions to create virtual datasets to data they don't have access to. These users could then use those virtual datasets to get access to unauthorized data. **Recommendations** For Apache Superset versions prior to 3.0.4, upgrade to version 3.0.4. For Apache Superset versions 3.1.0, upgrade to version 3.1.1.