Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

CVE-2023-27524 — Apache Superset Auth Bypass Vulnerability CVE-2023-27524. | Kitploit

GitHub/zz-socmap/cve-2023-27524

Authentication & Authorization Payload Generation Vulnerability Analysis Exploitation Web Application Exploitation Penetration Testing

zz-socmap/cve-2023-27524

CVE-2023-27524

Apache Superset Auth Bypass Vulnerability CVE-2023-27524.

View Repository

3233 years ago

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

CVE-2023-27524

** Description - POC for CVE-2023-27524: Apache Superset Auth Bypass Vulnerability. - create by antx at 2023-04-27.

** Detail - Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.

** CVE Severity - attackComplexity: HIGH - attackVector: NETWORK - availabilityImpact: LOW - confidentialityImpact: HIGH - integrityImpact: HIGH - privilegesRequired: NONE - scope: CHANGED - userInteraction: NONE - version: 3.1 - baseScore: 8.9 - baseSeverity: HIGH

** Affect - Apache Superset - <= 2.0.1

** POC - [[./CVE-2023-27524.py][Poc]]

** Patch - [[https://github.com/apache/superset/releases][vendor patch]]

** Reference - Ref-Source - [[https://twitter.com/momika233/status/1651276901821067265]] - [[https://github.com/projectdiscovery/nuclei-templates/pull/7125/commits/9e38e8cffb068786bb87d5629cb468960968ff81][Create CVE-2023-27524.yaml #7125]] - CVE - [[http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27524][CVE-2023-27524]] - NVD - [[https://nvd.nist.gov/vuln/detail/CVE-2023-27524][CVE-2023-27524]] - Ref-Poc-Engine - [[https://github.com/antx-code/pocx][pocx]]