You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by Daniel Gaspar <dp...@apache.org> on 2023/09/06 09:21:14 UTC

CVE-2023-27526: Apache Superset: Improper Authorization check on import charts

Affected versions:

- Apache Superset through 2.1.0

Description:

A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0.

Credit:

NTT DATA (finder)

References:

https://superset.apache.org
https://www.cve.org/CVERecord?id=CVE-2023-27526