You are viewing a plain text version of this content. The canonical link for it is here.

---

- CVE-2023-36387: Apache Superset: Improper API permission for low privilege users - posted by Daniel Gaspar <dp...@apache.org> on 2023/09/06 09:06:31 UTC, 0 replies.
- CVE-2023-36388: Apache Superset: Improper API permission for low privilege users allows for SSRF - posted by Daniel Gaspar <dp...@apache.org> on 2023/09/06 09:10:14 UTC, 0 replies.
- CVE-2023-39264: Apache Superset: Stack traces enabled by default - posted by Daniel Gaspar <dp...@apache.org> on 2023/09/06 09:26:10 UTC, 0 replies.
- CVE-2023-39265: Apache Superset: Possible Unauthorized Registration of SQLite Database Connections - posted by Daniel Gaspar <dp...@apache.org> on 2023/09/06 09:34:41 UTC, 0 replies.
- CVE-2023-37941: Apache Superset: Metadata db write access can lead to remote code execution - posted by Daniel Gaspar <dp...@apache.org> on 2023/09/06 09:40:57 UTC, 0 replies.
- CVE-2023-32672: Apache Superset: SQL parser edge case bypasses data access authorization - posted by Daniel Gaspar <dp...@apache.org> on 2023/09/06 09:46:10 UTC, 0 replies.