CVE-2023-27526

Incorrect Authorization in pypi/superset

Identifiers

CVE-2023-27526

Package Slug

pypi/superset

Vulnerability

Incorrect Authorization

Description

A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0. 

Affected Versions

All versions up to 2.1.0

Solution

Unfortunately, there is no solution available yet.

Last Modified

2023-09-12

source