CVE-2024-34693

CVE-2024-34693 Exploit Este repositorio contiene un script sofisticado en Python para explotar la vulnerabilidad CVE-2024-34693 en Apache Superset. El script configura un servidor MySQL falso y crea una conexión MariaDB maliciosa para exfiltrar el contenido de un archivo específico del sistema...

EUVD-2024-2067

Malicious code in bioql PyPI...

BIT-SUPERSET-2024-34693 Apache Superset: Server arbitrary file read

Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with localinfile enabled. If both the MariaDB server off by default and the local mysql client on the web server are set to allow for local infile, it's possible for the...

Exploit for Improper Input Validation in Apache Superset

CVE-2024-34693 Exploit This repository contains a sophisticat...

GHSA-HCR7-CQWC-Q5GQ Apache Superset server arbitrary file read

Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with localinfile enabled. If both the MariaDB server off by default and the local mysql client on the web server are set to allow for local infile, it's possible for the...

CVE-2024-34693 Apache Superset: Server arbitrary file read

Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with localinfile enabled. If both the MariaDB server off by default and the local mysql client on the web server are set to allow for local infile, it's possible for the...

CVE-2024-34693 Apache Superset: Server arbitrary file read

Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with localinfile enabled. If both the MariaDB server off by default and the local mysql client on the web server are set to allow for local infile, it's possible for the...