Lucene search
+L

Exploit for Deserialization of Untrusted Data in Apache Superset

🗓️ 02 Dec 2018 19:01:17Reported by r3dxpl0itType 
githubexploit
 githubexploit
🔗 github.com👁 3 Views

Remote code execution in Apache Superset via unsafe pickle deserialization.

Related
ReporterTitlePublishedViews
Family
zdt
zdt
Apache Superset 0.23 - Remote Code Execution Exploit
3 Dec 201800:00
–zdt
cnvd
CNVD
Apache Superset Command Execution Vulnerability
9 Nov 201800:00
–cnvd
checkpoint_advisories
Check Point Advisories
Apache Superset 0.23 Remote Code Execution (CVE-2018-8021)
27 Dec 201800:00
–checkpoint_advisories
cve
CVE
CVE-2018-8021
7 Nov 201814:00
–cve
cvelist
Cvelist
CVE-2018-8021
7 Nov 201814:00
–cvelist
exploitdb
Exploit DB
Apache Superset < 0.23 - Remote Code Execution
3 Dec 201800:00
–exploitdb
exploitpack
exploitpack
Apache Superset 0.23 - Remote Code Execution
3 Dec 201800:00
–exploitpack
github
Github Security Blog
Deserialization of Untrusted Data in superset
9 Nov 201817:40
–github
kitploit
Kitploit
Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021
5 Oct 202613:27
–kitploit
nvd
NVD
CVE-2018-8021
7 Nov 201814:29
–nvd
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Jul 2026 10:32Current
CVSS 27.5
CVSS 39.8
EPSS0.52758
3