Known Exploited Vulnerabilities January 08, 2024 · CISA KEV Catalog

CVE-2023-27524: Apache Superset Insecure Default Initialization of Resource Vulnerability

Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Apache CVE-2023-27524
Related: CVE-2016-3081: Apache Struts Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 08, 2026
CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Known Exploited Vulnerabilities · Aug 04, 2026
CVE-2026-34197: Apache ActiveMQ Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Apr 16, 2026