Lucene search
GitHub Advisory DatabaseGHSA-CMJC-52FG-9F7JHistoryJul 06, 2023 - 7:24 p.m.
Apache Superset vulnerable to Exposure of Sensitive Information
2023-07-0619:24:19
CWE-200
GitHub Advisory Database
github.com
9
0.001 Low
EPSS
Percentile
28.9%
An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache-superset | ge | 1.3.0 | |
| apache-superset | lt | 2.1.0 |
Related
osv
osv
CVE-2023-30776
2023-04-24 16:15:08
Apache Superset vulnerable to Exposure of Sensitive Information
2023-07-06 19:24:19
prion
prion
Design/Logic Flaw
2023-04-24 16:15:00
veracode
veracode
Password Disclosure
2023-04-27 04:10:21
cvelist
cvelist
CVE-2023-30776 Apache Superset: Database connection password leak
2023-04-24 15:29:53
cve
cve
CVE-2023-30776
2023-04-24 16:15:08
thn
thn