CVE-2023-36388 Information

Description

Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connections possible SSRF.

Reference

https://lists.apache.org/thread/ccmjjz4jp17yc2kcd18qshmdtf7qorfs