CVE-2023-27524 Apache Superset
Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions.
- CVSS
- not scored
On CISA’s exploited list
Apache Superset Insecure Default Initialization of Resource Vulnerability
- Added
- 2024-01-08
- Federal patch deadline
- 2024-01-29
- Ransomware use
- not known