{"cve":"CVE-2023-40610","nvd":{"published":"2023-11-27T11:15:07.293","modified":"2026-06-17T06:18:42.860","status":"Modified","description":"Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata database, an attacker using a specially crafted CTE SQL statement could change data on the metadata database. This weakness could result on tampering with the authentication/authorization data.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8},"cwes":["CWE-863"],"references":["http://www.openwall.com/lists/oss-security/2023/11/27/2","https://github.com/orangecertcc/security-research/security/advisories/GHSA-f678-j579-4xf5","https://lists.apache.org/thread/jvgxpk4dbxyqtsgtl4pdgbd520rc0rot","http://www.openwall.com/lists/oss-security/2023/11/27/2","https://github.com/orangecertcc/security-research/security/advisories/GHSA-f678-j579-4xf5"],"products":["apache:superset"],"source":"nvd","synced_at":"2026-10-19T21:42:07.670898610+00:00"},"epss":{"cve":"CVE-2023-40610","score":0.01335,"percentile":0.71173,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-f678-j579-4xf5","url":"https://osv.dev/vulnerability/GHSA-f678-j579-4xf5","summary":"Apache Superset - Elevation of Privilege","modified":"2026-07-08T06:28:43.090611797Z","packages":[{"ecosystem":"PyPI","name":"apache-superset","purl":"pkg:pypi/apache-superset","ranges":["<2.1.2"],"fixed":["2.1.2"]}]},{"id":"PYSEC-2026-1173","url":"https://osv.dev/vulnerability/PYSEC-2026-1173","summary":"Apache Superset - Elevation of Privilege","modified":"2026-07-07T17:56:59.360122925Z","packages":[{"ecosystem":"PyPI","name":"apache-superset","purl":"pkg:pypi/apache-superset","ranges":["<2.1.2"],"fixed":["2.1.2"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}