GitHub Advisoryadvisory · PyPI

GHSA-9qc3-p9jq-2x27 Apache Superset users may incorrectly create resources using the import charts feature

MEDIUM Published 2023-09-06 Modified 2023-09-06 Official page ↗

Aliases: CVE-2023-27526
Ecosystem: PyPI
Packages: apache-superset
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses: CWE-863
Reviewed: 2023-09-06

Affected packages

• PyPI apache-superset: <= 2.1.0 (no fix yet)

Description

A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0.

Related

Alias · CVE (1)

CVE-2023-27526 A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including… vulnerability

Weakness · CWE (1)

CWE-863 Incorrect Authorization weakness

References