writeups.xyz / CVE-2023-27524: Insecure Default Configuration in Apache Superset Leads to Remote Code Execution

Submitter : c2a

Date: 25 April 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Default Flask Secret Key
• Hardcoded Credentials

Programs :

• Apache Superset

Authors :

• Naveen Sunkavally

Link :
https://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/