Security Advisory

CVE-2023-36388

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-09-06 12:53:57
Last updated 2024-09-26 15:29:00
Assigner apache
CVSS score 4.3
State PUBLISHED

Description

Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connections, possible SSRF.