medium4.3
CVE-2023-27525
Apache Superset vulnerable to Improper Authorization
Impact
An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | apache-superset | <= 2.0.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Superset | through 2.0.1 |