Skip To Main Content
Retrieve Database on Muck Rack

Retrieve Database

As seen in: packetstormsecurity.com
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Retrieve

Contact Retrieve, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Apache Superset Signed Cookie Privilege Escalation

|
By Spencer McIntyre, Naveen Sunkavally, 'Relative URI, Retrieve Database
| packetstormsecurity.com
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpClient prepend Msf::Exploit::Remote::AutoCheck def initialize(info = {}) super( update_info( info, 'Name' => 'Apache Superset Signed Cookie Priv Esc', 'Description' => %q{ Apache Superset versions <= 2.0.0 utilize Flask with a known default secret key which is used to sign HTTP cookies.
Open in Who Shared Issue with article?
See all 1 articles