Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-72237
HistorySep 11, 2023 - 12:00 a.m.

Apache Superset Authorization Issues Vulnerability

2023-09-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
apache superset
authorization
vulnerability
sqllab
data visualization
data exploration
query tables

EPSS

0.001

Percentile

47.0%

Apache Superset is a data visualization and data exploration platform from the Apache (USA) Foundation. Apache Superset version 2.1.0 and prior versions have an authorization issue vulnerability that stems from incorrect authorization checks in SQLLab. An attacker can exploit the vulnerability to query tables in the superset that they cannot properly access.

EPSS

0.001

Percentile

47.0%