Back to the CVE list
CVE-2023-27524 CISA KEV · Actively exploited

Apache Superset Insecure Default Initialization of Resource Vulnerability

CVSS score

—

EPSS probability

%97.4

Risk score

—

Published

2 y ago

OverviewPublic Exploits (17)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
TardC/CVE-2023-27524
GitHub

Apache Superset Auth Bypass (CVE-2023-27524) (★12)

Public PoCSource updated: 19.11.2024 21:13:21
G
antx-code/CVE-2023-27524
GitHub

Apache Superset Auth Bypass Vulnerability CVE-2023-27524. (★2)

Public PoCSource updated: 27.04.2023 16:38:24
G
Pari-Malam/CVE-2023-27524
GitHub

Perform With Apache-SuperSet Leaked Token [CSRF] (★1)

Public PoCSource updated: 05.05.2023 08:59:24
G
horizon3ai/CVE-2023-27524
GitHub

Basic PoC for CVE-2023-27524: Insecure Default Configuration in Apache Superset (★0)

Public PoCSource updated: 25.04.2023 20:41:12
G
MaanVader/CVE-2023-27524-POC
GitHub

A POC for the all new CVE-2023-27524 which allows for authentication bypass and gaining access to the admin dashboard. (★0)

Public PoCSource updated: 04.05.2023 22:37:40
G
necroteddy/CVE-2023-27524
GitHub

CVE-2023-27524 (★0)

Public PoCSource updated: 31.08.2023 06:00:37
G
CN016/Apache-Superset-SECRET_KEY-CVE-2023-27524-
GitHub

Apache Superset 默认SECRET_KEY 漏洞(CVE-2023-27524) (★0)

Public PoCSource updated: 10.10.2023 17:34:01
G
NguyenCongHaiNam/Research-CVE-2023-27524
GitHub

CVE-2023-27524 (★0)

Public PoCSource updated: 30.10.2023 09:27:21
G
karthi-the-hacker/CVE-2023-27524
GitHub

Tool for finding CVE-2023-27524 (Apache Superset - Authentication Bypass) (★0)

Public PoCSource updated: 11.05.2024 21:23:39
G
CyberCTF/vulhub-superset-cve-2023-27524
GitHub

Vulhub superset/CVE-2023-27524: Apache Superset Default SECRET_KEY Session Forgery (CVE-2023-27524), run with Isoloom (★0)

Public PoCSource updated: 09.10.2026 08:15:25
E
Apache Superset 2.0.0 - Authentication Bypass
Exploit-DB

Apache Superset 2.0.0 - Authentication Bypass

Exploit referenceSource updated: 23.05.2023 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27524.yaml
Nuclei

Nuclei: Apache Superset - Authentication Bypass

Exploit reference
G
Cappricio-Securities/CVE-2023-27524
GitHub

Apache Superset - Authentication Bypass

Public PoC
G
h1n4mx0z/Research-CVE-2023-27524
GitHub

CVE-2023-27524

Public PoC
G
jakabakos/CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE
GitHub

jakabakos/CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

Public PoC
G
rachidafaf/bola-CVE-2023-27524
GitHub

rachidafaf/bola-CVE-2023-27524

Public PoC
G
sumaiyafathima-code/CVE-2023-27524
GitHub

sumaiyafathima-code/CVE-2023-27524

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-27524"