CVE-2023-27523 — Apache Superset: Improper data permission validation on Jinja templated queries

CVE-2023-27523

Apache Superset: Improper data permission validation on Jinja templated queries PUBLISHED

Description (CNA)

Improper data authorization check on Jinja templated queries in Apache Superset up to and including 2.1.0 allows for an authenticated user to issue queries on database tables they may not have access to.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Superset	affected 0 through 2.1.0

CWE

CWE-863

References

https://lists.apache.org/thread/3y97nmwm956b6zg3l8dh9oj0w7dj945h

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/3y97nmwm956b6zg3l8dh9oj0w7dj945h

CISA-ADP

No English description supplied.

No references supplied.