CVE-2023-36387

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

An improper default REST API permission for Gamma users in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma user to test database connections.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-363885.4Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connectionCVE-2023-363896.1A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGECVE-2023-363905.4A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGECVE-2023-363917.8Local Security Authority Subsystem Service Elevation of Privilege VulnerabilityCVE-2023-363927.5DHCP Server Service Denial of Service VulnerabilityCVE-2023-363937.8Windows User Interface Application Core Remote Code Execution VulnerabilityCVE-2023-363947.0Windows Search Service Elevation of Privilege VulnerabilityCVE-2023-363957.5Windows Deployment Services Denial of Service VulnerabilityCVE-2023-363967.8Windows Compressed Folder Remote Code Execution VulnerabilityCVE-2023-363979.8Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityCVE-2023-363986.5Windows NTFS Information Disclosure VulnerabilityCVE-2023-363997.1Windows Storage Elevation of Privilege Vulnerability
CVE-2023-36387: Medium severity, CVSS 5.4 | Vulnix