Vulnerabilities > CVE-2023-27526 - Incorrect Authorization vulnerability in Apache Superset

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
apache
CWE-863
NVD
Published: 2023-09-06
Updated: 2023-09-11

Summary

A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0. 

Vulnerable Configurations

Part Description Count
Application
Apache
224

Common Weakness Enumeration (CWE)

References