CVE-2023-27523: Apache Superset vulnerable to improper data authorization

The vulnerability stems from improper authorization checks during Jinja template processing in SQL queries. Key functions involved in query execution and templating (SqlaTable.get_sqla_query and execute_sql) are likely vulnerable because they handle user-inputted templates without sufficient post-rendering validation. These functions would normally be responsible for applying dataset-level permissions, but the Jinja context may allow attackers to bypass checks by manipulating template variables that reference unauthorized tables.