GitHub Advisoryadvisory · PyPI

GHSA-3hp7-4qq4-v5c6 Apache Superset Allocation of Resources Without Limits or Throttling vulnerability

MEDIUM Published 2023-11-28 Modified 2025-02-13 Official page ↗
Aliases
CVE-2023-42504
Ecosystem
PyPI
Packages
apache-superset
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770
Reviewed
2023-11-28

Affected packages

• PyPI apache-superset: < 3.0.0 → fixed in 3.0.0

Description

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0

Related

Alias · CVE (1)

  • CVE-2023-42504 An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a… vulnerability

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References