Lucene search

K
osvGoogleOSV:GHSA-FXJM-WVJ9-9C39
HistoryFeb 26, 2020 - 7:54 p.m.

Information disclosure in Apache Superset

2020-02-2619:54:57
Google
osv.dev
12

EPSS

0.001

Percentile

17.3%

An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users’ information, including hashed passwords, by accessing an unused and undocumented API endpoint on Apache Superset.

EPSS

0.001

Percentile

17.3%

Related for OSV:GHSA-FXJM-WVJ9-9C39