PRIOn knowledge basePRION:CVE-2023-46104

HistoryDec 19, 2023 - 10:15 a.m.

Code injection

2023-12-1910:15:00

PRIOn knowledge base

www.prio-n.com

code injection

apache superset

vulnerability

nvd

database

dashboards

datasets

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.9%

JSON

Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.
This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.

CPENameOperatorVersion
supersetlt2.1.3
supersetge3.0.0
supersetlt3.0.1

Name	Operator	Version
superset	lt	2.1.3
superset	ge	3.0.0
superset	lt	3.0.1

References

www.openwall.com/lists/oss-security/2023/12/19/1

www.openwall.com/lists/oss-security/2024/02/14/2

www.openwall.com/lists/oss-security/2024/02/14/3

lists.apache.org/thread/yxbxg4wryb7cb7wyybk11l5nqy0rsrvl