CVE-2023-40610

Summary

CVE-2023-40610 is a vulnerability affecting Apache Superset versions up to but excluding 2.1.2. An improper authorization check issue allows attackers to potentially escalate privileges and manipulate data in the metadata database using a specially crafted CTE SQL statement. This weakness can result in unauthorized modifications to authentication and authorization data, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.