~ / search / GHSA-7jhg-8m74-6f6g

GHSA-7jhg-8m74-6f6g

Apache Superset vulnerable to Improper Authorization

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-27525

Packages

EcosystemPackageAffectedFixed in
PyPI apache-superset <= 2.0.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1

References

External links from the advisory. They lead to third-party sites.