imPC@ndo IT

Tracker / CVE-2023-27525

CVE-2023-27525

Low 3.1

An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1

Affected products and versions

apache superset · … → 2.0.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References