BIT-superset-2023-27525

vendorUSosv

Apache Superset: Incorrect default permissions for Gamma role

view advisory published 2025-02-05Licence: per source

An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-27525US	medium4.3OT elevated	0.78% (56th)	—	2023-04-17
An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1

references

External citations — patches, advisories, analysis.

https://lists.apache.org/thread/wpv7b17zjg2pmvpfkdd6nn8sco8y2q77ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2023-27525WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan