Exploit / PoChighExploited in the wild

CISA adds Apache Superset bug to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsJan 9, 2024 · 18:33 UTC (Jan 9, 2024)1 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-27524 CVE-2023-38203 CVE-2023-29300 CVE-2023-41990 CVE-2016-20017 CVE-2023-23752

Tags: cve-2023-27524 cve-2023-38203 cve-2023-29300 cve-2023-41990 cve-2016-20017 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2016-20017	Unauthenticated Command Injection in D-Link DSL-2750B Router login.cgi	9.8	66%	KEVPoC ×2	Oct 19, 2022 KEV Jan 8, 2024
CVE-2023-23752	Improper Access Control in Joomla! Webservice Endpoints (CVE-2023-23752)	5.3	100%	KEV	Feb 16, 2023 KEV Jan 8, 2024
CVE-2023-27524	Insecure default SECRET_KEY in Apache Superset enables auth bypass and RCE	9.8	98%	KEVPoC ×2	Apr 24, 2023 KEV Jan 8, 2024
CVE-2023-29300	Deserialization of Untrusted Data RCE in Adobe ColdFusion (CVE-2023-29300)	9.8	100%	KEVRansomware	Jul 12, 2023 KEV Jan 8, 2024
CVE-2023-38203	Unauthenticated Deserialization RCE in Adobe ColdFusion (Actively Exploited)	9.8	97%	KEVRansomware	Jul 20, 2023 KEV Jan 8, 2024
CVE-2023-41990	Font Parsing Code Execution Flaw in Apple iOS, iPadOS, macOS, tvOS, watchOS	7.8	1%	KEV	Sep 12, 2023 KEV Jan 8, 2024

From the original article

1 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apache Superset vulnerability to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.