Description
No description available.
Apache Superset 身份验证绕过漏洞(访问成功)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.h3c.com/cn/d_202305/1844458_30003_0.htm
https://www.cnblogs.com/hetianlab/p/17493495.html
https://www.huaweicloud.com/notice/2022/20230427180653163.html
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Apache%20Superset%20%E7%A1%AC%E7%BC%96%E7%A0%81%20JWT%20%E5%AF%86%E9%92%A5%E5%AF%BC%E8%87%B4%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E%20CVE-2023-27524.md
https://blog.nsfocus.net/apache-supersetcve-2023-27524/
https://sites.lynu.edu.cn/xxhzx/info/1165/1297.htm
https://www.njucm.edu.cn/its/2023/0524/c4052a113260/page.htm
https://cloud.tencent.com/developer/article/2315010
https://nvd.nist.gov/vuln/detail/cve-2023-27524
https://packetstormsecurity.com/files/172522/Apache-Superset-2.0.0-Authentication-Bypass.html
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27524
https://horizon3.ai/attack-research/disclosures/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/