GitHub Advisoryadvisory · PyPI

GHSA-7jhg-8m74-6f6g Apache Superset vulnerable to Improper Authorization

MEDIUM Published 2023-04-17 Modified 2023-04-27 Official page ↗
Aliases
CVE-2023-27525
Ecosystem
PyPI
Packages
apache-superset
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-863
Reviewed
2023-04-21

Affected packages

• PyPI apache-superset: <= 2.0.1 (no fix yet)

Description

An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1

Related

Alias · CVE (1)

  • CVE-2023-27525 An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References