Product · Apache Software Foundation

Apache Superset

65 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.9

CVE-2023-27524 Exploited Public exploit EPSS 98%

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resour…

Apache Software Foundation Apache Superset apache-superset PyPI

Apr 24, 2023
KEV Jan 8, 2024