SU
Product
Superset
On CISA KEVExploited in the wild
70
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 7Medium 58Low 0
Watch
Add Superset to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-42505 | 4.3 | Nov 28 | Apache Superset: Sensitive information disclosure on db connection details Affected: before 3.0.0 |
| CVE-2023-42501 | 4.3 | Nov 27 | Apache Superset: Unnecessary read permissions within the Gamma role Affected: before 2.1.1 |
| CVE-2023-32672 | 4.3 | Sep 6 | Apache Superset: SQL parser edge case bypasses data access authorization Affected: through 2.1.0 |
| CVE-2023-39264 | 4.3 | Sep 6 | Apache Superset: Stack traces enabled by default Affected: through 2.1.0 |
| CVE-2023-27523 | 4.3 | Sep 6 | Apache Superset: Improper data permission validation on Jinja templated queries Affected: through 2.1.0 |
| CVE-2023-27526 | 4.3 | Sep 6 | Apache Superset: Improper Authorization check on import charts Affected: through 2.1.0 |
| CVE-2023-27525 | 4.3 | Apr 17 | Apache Superset: Incorrect default permissions for Gamma role Affected: through 2.0.1 |
| CVE-2021-37839 | 4.3 | Jul 6 | Improper access to dataset metadata information Affected: through 1.5.1 |