Auth bypass in Apache Superset
CVE-2023-40610
Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata database, an attacker using a specially crafted CTE SQL statement could change data on the metadata database. This weakness could result on tampering with the authentication/authorization data.
Vulnerability class: Broken Access Control
EPSS: 0.013 (68.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N.
Affected products
- Apache Superset
- Apache Software Foundation Superset — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security@apache.org (vendor-advisory, Mailing List, Vendor Advisory)
- security@apache.org (Mailing List, Third Party Advisory)
- security@apache.org
Frequently asked questions
- What is CVE-2023-40610?
- CVE-2023-40610 is a medium-severity vulnerability in Apache Superset, classified under Incorrect Authorization. CVSS score: 6.3/10. Published 2023-11-27.
- How severe is CVE-2023-40610?
- Medium severity. CVSS v3 base score is 6.3 out of 10.
- Is CVE-2023-40610 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.