CVE-2023-40610: Apache Superset: Privilege escalation with default examples database
First published: Mon Nov 27 2023(Updated: )
### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f678-j579-4xf5. This link is maintained to preserve external references. ### Original Description Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata database, an attacker using a specially crafted CTE SQL statement could change data on the metadata database. This weakness could result on tampering with the authentication/authorization data.
Credit: security@apache.org security@apache.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| pip/apache-superset | <2.1.2 | 2.1.2 |
| Apache Superset | <2.1.2 | |
| <2.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvd.nist.gov/vuln/detail/CVE-2023-40610
- https://lists.apache.org/thread/jvgxpk4dbxyqtsgtl4pdgbd520rc0rot
- http://www.openwall.com/lists/oss-security/2023/11/27/2
- https://github.com/advisories/GHSA-392c-vjfv-h7wr (Advisory)
- https://github.com/orangecertcc/security-research/security/advisories/GHSA-f678-j579-4xf5
- https://github.com/advisories/GHSA-f678-j579-4xf5 (Advisory)
Frequently Asked Questions
What is CVE-2023-40610?
CVE-2023-40610 is a vulnerability in Apache Superset that allows for privilege escalation with the default examples database.
What is the severity of CVE-2023-40610?
CVE-2023-40610 has a severity rating of 6.3, which is considered medium.
How does CVE-2023-40610 affect Apache Superset?
CVE-2023-40610 affects Apache Superset up to but excluding version 2.1.2.
How can an attacker exploit CVE-2023-40610?
An attacker can exploit CVE-2023-40610 by using a specially crafted CTE SQL statement with the default examples database connection.
Are there any references for CVE-2023-40610?
Yes, you can find more information about CVE-2023-40610 at the following references: [Reference 1](https://lists.apache.org/thread/jvgxpk4dbxyqtsgtl4pdgbd520rc0rot), [Reference 2](http://www.openwall.com/lists/oss-security/2023/11/27/2), [Reference 3](https://nvd.nist.gov/vuln/detail/CVE-2023-40610).
- collector/oss-sec
- alias/CVE-2023-40610
- agent/type
- agent/first-publish-date
- agent/author
- agent/title
- agent/weakness
- agent/severity
- agent/references
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-392c-vjfv-h7wr
- alias/GHSA-f678-j579-4xf5
- agent/softwarecombine
- collector/nvd-cve
- agent/event
- collector/github-advisory
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/trending
- vendor/apache
- canonical/apache superset
- package-manager/pip