GHSA-v594-2c97-hx38

ghsaUSosv

Apache Superset vulnerable to improper data authorization

view advisory published 2023-09-06Licence: CC-BY-4.0

Improper data authorization check on Jinja templated queries in Apache Superset up to and including 2.1.0 allows for an authenticated user to issue queries on database tables they may not have access to.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-27523US	medium4.3OT elevated	1.02% (63rd)	—	2023-09-06
Improper data authorization check on Jinja templated queries in Apache Superset up to and including 2.1.0 allows for an authenticated user to issue queries on database tables they…

references

External citations — patches, advisories, analysis.

https://github.com/apache/supersetPACKAGE
https://lists.apache.org/thread/3y97nmwm956b6zg3l8dh9oj0w7dj945hWEB
https://nvd.nist.gov/vuln/detail/CVE-2023-27523ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan