Apache Superset has improper default REST API permission for Gamma users

🗓️ 06 Sep 2023 15:26:30Reported by GoogleType

osv🔗 osv.dev👁 10 Views

Improper default REST API permissions for Gamma users in Apache Superset 2.1.

Reporter	Title	Published	Views	Family All 9
OSV	CVE-2023-36387	6 Sep 202313:15	–	osv
OSV	BIT-SUPERSET-2023-36387	5 Feb 202507:28	–	osv
Cvelist	CVE-2023-36387 Apache Superset: Improper API permission for low privilege users	6 Sep 202312:19	–	cvelist
Github Security Blog	Apache Superset has improper default REST API permission for Gamma users	6 Sep 202315:30	–	github
CNVD	Apache Superset Security Bypass Vulnerability (CNVD-2024-06820)	11 Sep 202300:00	–	cnvd
CVE	CVE-2023-36387	6 Sep 202313:15	–	cve
Vulnrichment	CVE-2023-36387 Apache Superset: Improper API permission for low privilege users	6 Sep 202312:19	–	vulnrichment
Prion	Input validation	6 Sep 202313:15	–	prion
NVD	CVE-2023-36387	6 Sep 202313:15	–	nvd

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-36387
github	www.github.com/apache/superset/pull/24185
github	www.github.com/apache/superset
lists	www.lists.apache.org/thread/tt6s6hm8nv6s11z8bfsk3r3d9ov0ogw3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Sep 2023 15:30Current

6.7Medium risk

Vulners AI Score6.7

CVSS35.4

EPSS0.00222

SSVC