CVE-2023-27524

CVE-2023-27524: Bypass de autenticación en Apache Superset Script para comprobar si un servidor Apache Superset se está ejecutando con una configuración predeterminada insegura CVE-2023-27524. El script comprueba si las cookies de sesión de un servidor Superset están firmadas con alguna de las...

CVE-2023-37941

利用Superset默认缓存中的Pickle RCE漏洞 信息 root@kitploit: 作者 Dinis Cruz 项目 Superset 描述 Apache Superset提供了多种缓存选项，所有这些选项都基于Flask-Caching。它提供了一个内置缓存，该缓存将值序列化以便后续检索。此序列化和检索使用Pickle完成，这允许反序列化Python对象，从而可以执行代码。 内置缓存将信息写入元数据数据库，这意味着能够访问该数据库的攻击者可以提升其权限，并获得对提供Superset服务的机器/容器的远程访问。 受影响的URL 或组件...

CVE-2024-34693

CVE-2024-34693 漏洞利用 此仓库包含一个用于利用 Apache Superset 中 CVE-2024-34693 漏洞的复杂 Python 脚本。该脚本设置一个恶意 MySQL 服务器，并创建恶意 MariaDB 连接，以从目标系统中窃取指定文件的内容。 !\Screenshot1.png\https://raw.githubusercontent.com/Mr-r00t11/CVE-2024-34693/main/img/Screenshot1.png 描述 CVE-2024-34693 漏洞允许能够创建任意数据库连接的攻击者执行 LOAD DATA LOCAL...

CVE-2023-27524

CVE-2023-27524 Tool for finding CVE-2023-27524 Apache Superset - Authentication Bypass...

CVE-2023-27524

CVE-2023-27524 描述 - CVE-2023-27524 的 POC：Apache Superset 身份验证绕过漏洞。 - 由 antx 于 2023-04-27 创建。 详情 - Apache Superset 2.0.1 及更早版本中存在会话验证攻击。未按照安装说明修改默认 SECRETKEY 配置的安装环境，允许攻击者进行身份验证并访问未授权资源。这不影响已更改 SECRETKEY 配置默认值的 Superset 管理员。 CVE 严重性 - attackComplexity: HIGH - attackVector: NETWORK -...

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

CVE-2023-27524: Apache Superset Auth Bypass and RCE Apache Superset, a widely used open-source tool for data visualization and exploration, has been identified as having potential security weaknesses that could lead to authentication bypass and remote code execution RCE. These vulnerabilities cou...

Superset_auth_bypass_check

Supersetauthbypasscheck Apahce-Superset身份认证绕过漏洞CVE-2023-27524检测工具 修复时间：2023.8.3 修复由于硬编码session时间过期导致的session失效，引用flasksessioncookiemanager工具生成实时session进行检测。 修复由于未禁用重定向导致跳转/login/匹配状态码为200的bug 感谢nplookges师傅的反馈 开发环境： python3 避免python环境命名导致运行失败，可将python运行程序改为python3添加到环境变量中 root@kitploit:...

Research-CVE-2023-27524

Research-CVE-2023-27524 El concurso de estudiantes de seguridad de la información de la ASEAN ha terminado temporalmente; mi equipo MSECHUNT3R ganó el segundo premio en la categoría Jeopardy. Mi estado de ánimo es agridulce porque el apartado web de este año no cumplió mis expectativas, pero buen...

Apache Superset < 4.0.2 - SQL Injection

An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. To mitigate this, a new...

Apache Superset <=1.3.2 - Default Login

Apache Superset through 1.3.2 contains a default login vulnerability via registered database connections for authenticated users. An attacker can obtain access to user accounts and thereby obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-44451 info:...

CVE-2026-23980-Exploit

CVE-2026-23980 - Inyección SQL autenticada en Apache Superset root@kitploit: / \ | | | | | || | \\ sqlExpression va directo a la consulta. sin parametrización. sin esperanza. Apache Superset ChartDataRestApi.data - QueryContext.getdfpayload - SqlaTable.getsqlaquery - columna adhoc sqlExpression /...

CVE-2024-34693

CVE-2024-34693: Lectura Arbitraria de Archivos del Servidor en Apache Superset Vulnerabilidad de validación de entrada incorrecta en Apache Superset, que permite a un atacante autenticado crear una conexión MariaDB con localinfile habilitado. Al habilitar localinfile en el cliente MySQL/MariaDB d...

CLEANSTART-2026-EC11110 undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers

Multiple security vulnerabilities affect the apache-superset package. undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers. See references for...

CVE-2023-27524

CVE-2023-27524 Apache Superset 中不安全的默认配置导致远程代码执行 截图 要求 Python3.7+ 支持的操作系统 Linuxer Wingays 开始使用 root@kitploit: $ git clone https://github.com/Pari-Malam/CVE-2023-27524 $ cd CVE-2023-27524 $ pip/pip3 install -r requirements.txt $ python/python3 superset.py 足迹说明...

Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

Ejecución de código en la librería pickle de Apache Superset IBM : Apache Superset podría permitir a un atacante remoto ejecutar código arbitrario en el sistema, debido al uso del método de carga no seguro de la librería pickle para deserializar datos. Mediante el envío de una solicitud...

CVE-2023-27524

CVE-2023-27524 Apache Superset 인증 우회 CVE-2023-27524 참조 https://nvd.nist.gov/vuln/detail/CVE-2023-27524 https://github.com/horizon3ai/CVE-2023-27524 https://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/...

CVE-2023-27524

CVE-2023-27524 Herramienta para encontrar CVE-2023-27524 Apache Superset - Omisión de Autenticación...

Apache-Superset-SECRET_KEY-CVE-2023-27524-

Apache-Superset-SECRETKEY-CVE-2023-27524-...

CVE-2023-27524-POC

CVE-2023-27524: Bypass de autenticación en Apache Superset Script para comprobar si un servidor Apache Superset es vulnerable a CVE-2023-27524 y, si lo es, forjar una cookie de sesión con el userid = 1, que normalmente es el usuario admin, lo que permite omitir la autenticación y obtener acceso a...

Apache Superset - Authentication Bypass

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRETKEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset...