CVE-2023-27524 Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

🗓️ 24 Apr 2023 15:28:16Reported by apacheType

Apache Superset: Session validation vulnerability in using default SECRET_KE

Reporter	Title	Published	Views	Family All 48
GithubExploit	Exploit for Path Traversal in Oracle Weblogic_Server	5 Jun 202416:29	–	githubexploit
GithubExploit	Exploit for Missing Authorization in Myeventon Eventon	3 Jun 202414:21	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	25 Apr 202304:59	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	27 Apr 202307:31	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	4 May 202321:43	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	4 May 202321:43	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Phpmyfaq	11 May 202412:29	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	11 May 202412:29	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	27 Apr 202307:31	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	8 Sep 202306:15	–	githubexploit

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Superset",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.0.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/175094/Apache-Superset-2.0.0-Remote-Code-Execution.html
lists	www.lists.apache.org/thread/n0ftx60sllf527j7g11kmt24wvof8xyk
openwall	www.openwall.com/lists/oss-security/2023/04/24/2
packetstormsecurity	www.packetstormsecurity.com/files/172522/Apache-Superset-2.0.0-Authentication-Bypass.html

08 Apr 2024 09:07Current

9.3High risk

Vulners AI Score9.3

CVSS 3.18.9

EPSS0.97405

CWE-1188