exploit/linux/http/apache_superset_cookie_sig_rce
functionalApache Superset Signed Cookie RCE
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-39265US | medium6.5 | Exploit | ||
Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database im… | ||||
| CVE-2023-37941US | medium6.6 | Exploit | ||
If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Supers… | ||||
| CVE-2023-27524US | critical9.8OT critical | KEV | ||
Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation in… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan