EDB-45933

PoC

Apache Superset < 0.23 - Remote Code Execution

view exploit source exploit_dbtype webappsauthor David Maypublished 2018-12-03catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-8021US	critical9.8	53.4% (99th)	Exploit	2018-11-07
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.