CVE-2023-36387 - How Improper Default REST API Permissions in Apache Superset Expose Sensitive Database Operations
---
Introduction
In June 2023, a significant security issue was disclosed in Apache Superset—an open-source data visualization and exploration platform. The vulnerability, identified as
CVE-2023-39264 - Apache Superset Stack Trace Exposure in REST API (Up to 2.1.) – Exploit Details and Security Insights
Date: June 2024
Author: [Exclusive Post for Your Eyes Only]
Apache Superset is one of the most popular open-source data exploration and visualization platforms in
CVE-2023-27524 - How Default Secrets in Apache Superset Opened the Door to Session Hijacking
In May 2023, the open-source analytics platform Apache Superset made headlines—but for all the wrong reasons. A critical vulnerability tracked as CVE-2023-27524 was disclosed,
CVE-2023-25504 - How Authenticated Users Can Exploit Apache Superset’s Dataset Import for SSRF Attacks
1. Background: What is Apache Superset?
Apache Superset is a popular open-source data visualization and data exploration platform. It’s used by data scientists and
Episode
00:00:00
00:00:00