CVE-2023-27525
Apache Superset: Incorrect default permissions for Gamma role
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 3.1EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
17 Apr 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Apache Software Foundation · Apache SupersetWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →