Auth bypass in Apache Superset
CVE-2023-40610
Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata database, an attacker using a specially crafted CTE SQL statement could change data on the metadata database. This weakness could result on tampering with the authentication/authorization data.
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.013 (70.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 70.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Apache Superset
- Apache Software Foundation Superset — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- lists.apache.org/thread/jvgxpk4dbxyqtsgtl4pdgbd520rc0rot (vendor-advisory, Mailing List, Vendor Advisory)
- www.openwall.com/lists/oss-security/2023/11/27/2 (Mailing List, Third Party Advisory)
- github.com/orangecertcc/security-research/security/advisories/GHSA-f678-j579-4x…
Frequently asked questions
- What is CVE-2023-40610?
- CVE-2023-40610 is a medium-severity vulnerability in Apache Superset, classified under Incorrect Authorization. CVSS score: 6.3/10. Published 2023-11-27.
- How severe is CVE-2023-40610?
- Medium severity. CVSS v3 base score is 6.3 out of 10.
- Is CVE-2023-40610 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.