exploit/linux/http/apache_superset_cookie_sig_rce
funktionalApache Superset Signed Cookie RCE
01
ausgenutzte CVEs (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-39265US | medium6.5 | Exploit | ||
Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database im… | ||||
| CVE-2023-37941US | medium6.6 | Exploit | ||
If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Supers… | ||||
| CVE-2023-27524US | critical9.8OT kritisch | KEV | ||
Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation in… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan