Apache Superset Known Default SECRET_KEY (CVE-2023-27524)

critical Nessus Plugin ID 197191

Language:

Version 1.25 Nov 22, 2024, 6:54 PM Logic Changes (Fixed installation reporting) Plugin Feed: 202411221854
Version 1.24 Nov 12, 2024, 8:29 PM Logic Changes (Adding installs report) Plugin Feed: 202411122029
Version 1.22 Oct 29, 2024, 8:44 PM Logic Changes (Extend structured reporting to vcf_extras) Plugin Feed: 202410292044
Version 1.18 Oct 10, 2024, 11:57 PM New Plugin Feed: 202410102357
Version 1.17 Oct 9, 2024, 5:56 PM Logic Changes (Corrects vulnerability-finding structured data tags to include the port.) Plugin Feed: 202410091756
Version 1.13 Oct 3, 2024, 6:29 PM Detection (Adding hardware constraint support to VCF and UCF) Plugin Feed: 202410031829
Version 1.12 Oct 2, 2024, 4:10 PM Logic Changes (Adds structured data reports to a subset of manual plugins.) Plugin Feed: 202410021610
Version 1.7 Jul 17, 2024, 11:02 PM Logic Changes Plugin Feed: 202407172302
Version 1.3 May 20, 2024, 10:13 AM Logic Changes Plugin Feed: 202405201013
Version 1.2 May 19, 2024, 3:32 PM CISA reference Plugin Feed: 202405191532
Version 1.1 May 17, 2024, 10:54 AM Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploitability ease" set to "Exploits are available") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") Exploit attributes ("Exploit available" set to "True") Plugin Feed: 202405171054
Version 1.0 May 16, 2024, 10:00 PM New Plugin Feed: 202405162200

* Changelogs are generally available for changes made after Nov 1, 2022