~ / search / GHSA-9qc3-p9jq-2x27

GHSA-9qc3-p9jq-2x27

Apache Superset users may incorrectly create resources using the import charts feature

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-27526

Packages

EcosystemPackageAffectedFixed in
PyPI apache-superset <= 2.1.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0.

References

External links from the advisory. They lead to third-party sites.