Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2023-27525

Apache Superset: Incorrect default permissions for Gamma role

Description

An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Superset

Default version status: unaffected

  • 0 to ≤ 2.0.1affected

References