Description
No description available.
Apache Superset 身份验证绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/hetianlab/p/17493495.html
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Apache%20Superset%20%E7%A1%AC%E7%BC%96%E7%A0%81%20JWT%20%E5%AF%86%E9%92%A5%E5%AF%BC%E8%87%B4%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E%20CVE-2023-27524.md
https://www.h3c.com/cn/d_202305/1844458_30003_0.htm
https://sites.lynu.edu.cn/xxhzx/info/1165/1297.htm
https://blog.nsfocus.net/apache-supersetcve-2023-27524/
https://www.huaweicloud.com/notice/2022/20230427180653163.html
https://cloud.tencent.com/developer/article/2315010
https://www.aqtd.com/nd.jsp?id=3899
https://zhuanlan.zhihu.com/p/627654555
https://www.njucm.edu.cn/its/2023/0524/c4052a113260/page.htm
https://cert.360.cn/warning/detail?id=6448f2f622fb511ce8a14afe
https://blog.csdn.net/xiayu729100940/article/details/135533031
https://www.ctfiot.com/154123.html
https://www.vicarius.io/vsociety/posts/cve-2023-27524-authentication-bypass-in-apache-superset
https://avd.aliyun.com/detail?id=AVD-2024-34693
https://www.anquanke.com/post/id/302602
https://www.horizon3.ai/attack-research/disclosures/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/
https://nvd.nist.gov/vuln/detail/cve-2023-27524
https://www.exploit-db.com/exploits/51447
https://horizon3.ai/attack-research/disclosures/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/
https://csirt.divd.nl/cases/DIVD-2023-00026/
https://packetstormsecurity.com/files/172522/Apache-Superset-2.0.0-Authentication-Bypass.html
https://www.rapid7.com/db/vulnerabilities/apache-superset-cve-2023-27524/
https://www.cybrary.it/course/cve-series-authentication-bypass-in-apache-superset-cve-2023-27524
https://superset.apache.org/admin-docs/security/cves/