Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2023-42504

Apache Superset: Lack of rate limiting allows for possible denial of service

Description

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Superset

Default version status: unaffected

  • 0 to < 3.0.0affected

References