CVE-2023-27523 — Apache Superset: Improper data permission validation on Jinja templated queries
Improper data authorization check on Jinja templated queries in Apache Superset up to and including 2.1.0 allows for an authenticated user to issue queries on database tables th…
Published: 2023-09-06 · CVSS: 5.0 · CVSS 3.1
Improper data authorization check on Jinja templated queries in Apache Superset up to and including 2.1.0 allows for an authenticated user to issue queries on database tables they may not have access to.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7