-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| apache-superset | pip | < 3.0.0 | 3.0.0 |
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability stems from unthrottled dashboard export endpoints. Since the attack vector involves multiple concurrent export requests, the logical candidate is the dashboard export handler function. In Flask-based applications like Superset, these are typically implemented as API endpoints. The lack of rate-limiting decorators or concurrency checks in the export function (commonly found in REST API classes) would make it vulnerable to DoS via resource exhaustion. This matches the CWE-770 pattern and the described exploit scenario.
Ongoing coverage of React2Shell