CVE-2023-27524 — 脆弱性インテリジェンス
Apache — Superset
公表日:
- CVSS
- 8.9
- CISA KEV
- 既知の悪用を確認
情報源の原文（翻訳ではありません）
Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions.