Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-46104
6.5
MEDIUMCVSS v3
Published
December 19, 2023
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets. This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.
apache/superset
GitHubApache Superset is a Data Visualization and Data Exploration Platform
GitHubApache Superset is a Data Visualization and Data Exploration Platform< 2.1.3, >= 3.0.0, < 3.0.1, < 2.1.2, >= 3.0.0, < 3.1.0rc1NVD