CVE-2023-27523

—

CVSS 3.1

4.3 medium

EPSS

1%p61

Published

Sep 6, 2023 (Sep 6, 2023)

Modified

Jun 17, 2026

Description

Improper data authorization check on Jinja templated queries in Apache Superset up to and including 2.1.0 allows for an authenticated user to issue queries on database tables they may not have access to.

Vendors: apache
Products: superset
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.