Exploit for CVE-2023-27524

kitploit · 2026-08-25

Description

Authentication bypass vulnerability in Apache Superset (CVE-2023-27524).

Affected Apache Superset versions

Apache Superset≤ 2.0.1

All known vulnerabilities by product

Apache Superset

CVSS 9.8 for CVE-2023-27524

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:LOW

CVE Information

Exploit Details

Modified:2026-08-25 23:53

Last Seen:2026-08-26 02:52

Reporter:KitPloit

Tags

Apache SupersetAuthentication BypassCVE-2023-27524Detection Tool

Other exploits for CVE-2023-27524

sound4-directory-listing

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

Superset_auth_bypass_check

2026-09-10 KitPloitKITPLOIT

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

Research-CVE-2023-27524

2026-09-09 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-KARTHI-THE-HACKER-CVE-2023-27524
# CVE-2023-27524

Инструмент для поиска CVE-2023-27524 (Apache Superset - Обход аутентификации)