CVE-2023-36388

published 2023-09-06

CVE-2023-36388: Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connections, possible SSRF.

medium 5.4 CVSS 3.1

AV N AC L PR L UI N S U C L I L A N

Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connections, possible SSRF.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	superset	<= 2.1.0	—
apache_software_foundation	apache_superset	<= 2.1.0	—

CWE-918