CVE-2024-23952 in Superset

요약

\~에 의해 MITRE • 2024. 02. 14.

Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.   This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.

Once again VulDB remains the best source for vulnerability data.

• 책임이 있는: Apache Software Foundation
• 예약하다: 2023. 10. 16.
• 공개: 2024. 02. 14.
• 모더레이션: 수락
• 항목: VDB-248374
• CPE: 준비됨
• CWE: CWE-400 (확인됨)
• CVSS: 6.5 (CNA)
• EPSS: 0.01653
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-23952
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-23952
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-23952/