CVE-2023-27524: Insecure Default Configuration in Apache Superset Leads to Remote Code Execution

CVE

CVE-2023-27524

Published

2023-04-25 11:40

Collected

2026-10-21 15:26

---
id: 10237
title: "CVE-2023-27524: Insecure Default Configuration in Apache Superset Leads to Remote Code Execution"
cve: CVE-2023-27524
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/disclosures/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/"
published_at: "2023-04-25T11:40:22Z"
tags: ["rce", "vulnerability-research", "apache", "horizon3", "superset", "cve-2023-27524", "default-config"]
phying_url: "https://phying.com/item/10237"
lang: en
---

# CVE-2023-27524: Insecure Default Configuration in Apache Superset Leads to Remote Code Execution

## Summary

Apache Superset is an open source data visualization and exploration tool. It has over 50K stars on GitHub, and there are more than 3000 instances of it exposed to the Internet.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2023-27524
- **Published:** 2023-04-25T11:40:22Z
- **Original:** https://horizon3.ai/attack-research/disclosures/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/
- **Phying News:** https://phying.com/item/10237