+- (https://hackmyride.com/forum)
+-- Forum: Automotive Hacking (https://hackmyride.com/forum/forumdisplay.php?fid=211)
+--- Forum: News (https://hackmyride.com/forum/forumdisplay.php?fid=278)
+---- Forum: The Hacker News (https://hackmyride.com/forum/forumdisplay.php?fid=279)
+---- Thread: Hacking News Alert: Apache Superset Vulnerabilities Expose Servers to Remote Code Execution Attac (/showthread.php?tid=7299)
Alert: Apache Superset Vulnerabilities Expose Servers to Remote Code Execution Attac - The Hacker News - 09-11-2023
Alert: Apache Superset Vulnerabilities Expose Servers to Remote Code Execution Attac
Patches have been released to address two new security vulnerabilities in Apache Superset that could be exploited by an attacker to gain remote code execution on affected systems.
The update (version 2.1.1) plugs CVE-2023-39265 and CVE-2023-37941, which make it possible to conduct nefarious actions once a bad actor is able to gain control of Superset’s metadata database.
Outside of these
https://thehackernews.com/2023/09/alert-apache-superset-vulnerabilities.html