GHSA-9qc3-p9jq-2x27

ghsaUSosv

Apache Superset users may incorrectly create resources using the import charts feature

view advisory published 2023-09-06Licence: CC-BY-4.0

A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-27526US	medium4.3OT elevated	1.21% (68th)	—	2023-09-06
A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.