CVE-2023-42504

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0

• CWE-770

• http://www.openwall.com/lists/oss-security/2023/11/28/6Mailing List, Third Party Advisory
• https://lists.apache.org/thread/yzq5gk1y9lyw6nxwd3xdkxg1djqw1h6lMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2023/11/28/6Mailing List, Third Party Advisory
• https://lists.apache.org/thread/yzq5gk1y9lyw6nxwd3xdkxg1djqw1h6lMailing List, Vendor Advisory

Published

Nov 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42497Reflected cross-site scripting (XSS) vulnerability on the Ex…6.1
• CVE-2023-42498Reflected cross-site scripting (XSS) vulnerability in the La…6.1
• CVE-2023-4250The EventPrime WordPress plugin before 3.2.0 does not saniti…6.1
• CVE-2023-42501Unnecessary read permissions within the Gamma role would all…4.3
• CVE-2023-42502An authenticated attacker with update datasets permission co…5.4
• CVE-2023-42503Improper Input Validation, Uncontrolled Resource Consumption…5.5
• CVE-2023-42505An authenticated user with read permissions on database conn…4.3
• CVE-2023-42506Improper restriction of operations within the bounds of a me…7.8
• CVE-2023-42507Stack-based buffer overflow vulnerability exists in OnSinVie…7.8
• CVE-2023-42508JFrog Artifactory prior to version 7.66.0 is vulnerable to s…6.5
• CVE-2023-42509JFrog Artifactory later than version 7.17.4 but prior to ver…7.5
• CVE-2023-4251The EventPrime WordPress plugin before 3.2.0 does not have C…4.3