CVE-2024-23952

This is a duplicate for CVE-2023-46104. With correct CVE version ranges for affected Apache Superset. Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.   This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.

• CWE-400

• http://www.openwall.com/lists/oss-security/2024/02/14/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/02/14/3Mailing List, Third Party Advisory
• https://lists.apache.org/thread/zc58zvm4414molqn2m4d4vkrbrsxdksxVendor Advisory
• http://www.openwall.com/lists/oss-security/2024/02/14/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/02/14/3Mailing List, Third Party Advisory
• https://lists.apache.org/thread/zc58zvm4414molqn2m4d4vkrbrsxdksxVendor Advisory

Published

Feb 14, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23947Multiple improper array index validation vulnerabilities exi…8.8
• CVE-2024-23948Multiple improper array index validation vulnerabilities exi…8.8
• CVE-2024-23949Multiple improper array index validation vulnerabilities exi…8.8
• CVE-2024-2395The Bulgarisation for WooCommerce plugin for WordPress is vu…4.3
• CVE-2024-23950Multiple improper array index validation vulnerabilities exi…8.8
• CVE-2024-23951Multiple improper array index validation vulnerabilities exi…8.8
• CVE-2024-23953Use of Arrays.equals() in LlapSignerImpl in Apache Hive to c…6.5
• CVE-2024-23957Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat St…8.8
• CVE-2024-23958Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Creden…8.8
• CVE-2024-23959Autel MaxiCharger AC Elite Business C50 BLE AppChargingContr…8
• CVE-2024-2396Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-23960Alpine Halo9 Improper Verification of Cryptographic Signatur…4.6