CVE-2023-42501

Summary

CVE-2023-42501 is a cybersecurity vulnerability affecting Apache Superset versions before 2.1.2. The issue grants authenticated users with the Gamma role unnecessary read permissions, enabling them to access configured CSS templates and annotations. This poses a risk to data confidentiality. To mitigate this vulnerability, users are advised to upgrade to version 2.1.2 or higher and run `superset init` to reconstruct the Gamma role or remove the corresponding read permissions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.