CVE-2023-36387 - CERT CVE

  1. CVE-2023-36387

ID CVE-2023-36387
Sažetak An improper default REST API permission for Gamma users in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma user to test database connections.
Reference
CVSS
Base: 5.4
Impact: 2.5
Exploitability:2.8
Pristup
VektorSloženostAutentikacija
NETWORK LOW -
Impact
PovjerljivostCjelovitostDostupnost
NONE LOW LOW
CVSS vektor CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Zadnje važnije ažuriranje 19-10-2023 - 18:47
Objavljeno 06-09-2023 - 13:15