1. Home
  2. CVE Database
  3. CVE-2023-27525
LOW · 3.1

CVE-2023-27525

An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1

Vulnerability Description

An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1

CVSS Score

3.1

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ApacheSuperset<= 2.0.1

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2023-27525?

CVE-2023-27525 is a vulnerability with a CVSS score of 3.1 (LOW). An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1

How severe is CVE-2023-27525?

CVE-2023-27525 has been rated LOW with a CVSS base score of 3.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-27525?

Check the references section above for vendor advisories and patch information. Affected products include: Apache Superset.