Apache Superset Vulnerability: Insecure Default Configuration Exposes Servers to RCE Attacks

🗓️ 26 Apr 2023 09:29:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 5 Views

Apache Superset fixed insecure default SECRET_KEY that allowed remote code execution.

Reporter	Title	Published	Views	Family All 50
GithubExploit	Exploit for Path Traversal in Oracle Weblogic_Server	5 Jun 202416:29	–	githubexploit
GithubExploit	Exploit for Missing Authorization in Myeventon Eventon	3 Jun 202414:21	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	25 Apr 202304:59	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	27 Apr 202307:31	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	4 May 202321:43	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	4 May 202321:43	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Phpmyfaq	11 May 202412:29	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	11 May 202412:29	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	27 Apr 202307:31	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	8 Sep 202306:15	–	githubexploit

27 Apr 2023 07:55Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18.9 - 9.8

EPSS0.97405

apache superset default secret key remote code execution cve 2023 27524