CVE-2023-36388

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connections, possible SSRF.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-918

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-363896.1A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGECVE-2023-363905.4A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGECVE-2023-363917.8Local Security Authority Subsystem Service Elevation of Privilege VulnerabilityCVE-2023-363927.5DHCP Server Service Denial of Service VulnerabilityCVE-2023-363937.8Windows User Interface Application Core Remote Code Execution VulnerabilityCVE-2023-363947.0Windows Search Service Elevation of Privilege VulnerabilityCVE-2023-363957.5Windows Deployment Services Denial of Service VulnerabilityCVE-2023-363967.8Windows Compressed Folder Remote Code Execution VulnerabilityCVE-2023-363979.8Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityCVE-2023-363986.5Windows NTFS Information Disclosure VulnerabilityCVE-2023-363997.1Windows Storage Elevation of Privilege VulnerabilityCVE-2023-36407.8A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user ma
CVE-2023-36388: Medium severity, CVSS 5.4 | Vulnix