← CVE Intelligence

CVE-2023-36388

Apache Superset: Improper API permission for low privilege users allows for SSRF PUBLISHED

Description (CNA)

Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connections, possible SSRF.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Supersetaffected 0 through 2.1.0

CWE

CWE-918

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.