CVE-2023-36387
Apache Superset: Improper API permission for low privilege users
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.4EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
06 Sep 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An improper default REST API permission for Gamma users in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma user to test database connections.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Affected products
Apache Software Foundation · Apache SupersetWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →