https://pwn.watch/i/apache-superset-cve-2023-27524 Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions. Added to the CISA KEV catalog on 2024-01-08. CVE-2023-27524 was assigned before 2024; the KEV listing came in 2024. en Mon, 08 Jan 2024 00:00:00 GMT https://pwn.watch/i/apache-superset-cve-2023-27524 https://pwn.watch/i/apache-superset-cve-2023-27524#2024-01-08-9ec8e672 Mon, 08 Jan 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>