CVE-2023-27524

Apache Superset Insecure Default Initialization of Resource Vulnerability

Beschreibung

Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions.

Schweregrad: HIGH

CVSS-Score: 8.9

Hersteller: Apache

Produkt: Superset