Apache Superset Flask Debugger Exposure Leading to Remote Code Execution (CTAS SQL Injection to Unlock Werkzeug PIN)

CV26: Flask Debugger Exposure Leading to Remote Code Execution Vulnerability Overview | Item | Details | |------|------| | Type | Remote Code Execution RCE | | Severity | Critical when conditions are met / Medium standalone | | Affected Versions | = 6.0.1 | | Who can do what with what impact |...