CVE-2018-8021 | BDVDB-2026-109152 Detail

Superset

Description#

Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/45933/
https://github.com/apache/incubator-superset/pull/4243

Exploit#

https://www.exploit-db.com/exploits/45933/

History#

Version 12018-11-07Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.