Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2023-27525

An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1

VectorNETWORK

PublishedApr 17, 2023, 17:15

Published Bysecurity@apache.org

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

apache-superset(PyPI)0N/AN/A

References

https://lists.apache.org/thread/wpv7b17zjg2pmvpfkdd6nn8sco8y2q77

Weakness Type

CWE-863

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK