medium4.3
CVE-2023-36388
Apache Superset Server Side Request Forgery vulnerability
Impact
Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connections, possible SSRF.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | apache-superset | <= 2.1.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Superset | through 2.1.0 |