Apache Superset Import Dashboards Remote Code Execution

A remote code execution exists in Apache Superset through the 'Import Dashboards' feature. The vulnerability exists as a result of an insecure 'pickle' deserialization, allowing execution of arbitrary methods from the Python library. An authenticated attacker can therefore execute arbitrary code on the target system under the user that runs the 'gunicorn' webserver.