Lucene search
GoogleOSV:CVE-2023-36388HistorySep 06, 2023 - 1:15 p.m.
CVE-2023-36388
2023-09-0613:15:08
Google
osv.dev
7
apache superset
rest api
permission
network connections
ssrf
vulnerability
gamma users
cve-2023-36388
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
45.9%
Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connections, possible SSRF.
Related
nvd
nvd
CVE-2023-36388
2023-09-06 13:15:08
prion
prion
Server side request forgery (ssrf)
2023-09-06 13:15:00
github
github
Apache Superset Server Side Request Forgery vulnerability
2023-09-06 15:30:26
osv
osv
Apache Superset Server Side Request Forgery vulnerability
2023-09-06 15:30:26
cvelist
cvelist
cve
cve
CVE-2023-36388
2023-09-06 13:15:08
cnvd
cnvd
Apache Superset REST API Authorization Issues Vulnerability
2023-09-11 00:00:00
vulnrichment
vulnrichment
thn
thn
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
45.9%
Related for OSV:CVE-2023-36388