CVE-2023-42504

published 2023-11-28

CVE-2023-42504: An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service.

This issue affects Apache Superset: before 3.0.0

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	superset	< 3.0.0	3.0.0
apache_software_foundation	apache_superset	< 3.0.0	3.0.0

CWE-770