Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-36388
4.3
MEDIUMCVSS v3
Published
September 6, 2023
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connections, possible SSRF.
apache/superset
GitHubApache Superset is a Data Visualization and Data Exploration Platform
GitHubApache Superset is a Data Visualization and Data Exploration Platform<= 2.1.0, < 2.1.1NVD