DeutschShown in its original language — a full translation is planned for a future version.
Apache Superset: Mehrere Schwachstellen
view advisory published 2023-11-28
Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-42504US | medium6.5 | — | ||
An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service.
This issue affect… | ||||
| CVE-2023-42505US | medium4.3 | — | ||
An authenticated user with read permissions on database connections metadata could potentially access sensitive information such as the connection's username.
This issue affects A… | ||||
| CVE-2023-42502US | medium5.4 | — | ||
An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2023-11-28external
- GitHub Advisory Database vom 2023-11-28external
- GitHub Advisory Database vom 2023-11-28external
- Apache Mailing List vom 2023-11-28external
- Apache Mailing List vom 2023-11-28external
- Apache Mailing List vom 2023-11-28external
- WID-SEC-W-2023-3023 - CSAF Versionself
- WID-SEC-2023-3023 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan