Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:15 a.m.4 views

CVE-2024-53948

Generation of Error Message Containing analytics metadata Information in Apache Superset. This issue affects Apache Superset: before 4.1.0. Users are recommended to upgrade to version 4.1.0, which fixes the issue...

5.3CVSS6.7AI score0.00172EPSS
Exploits0References1
OSV
OSV
added 2025/02/05 7:25 a.m.7 views

BIT-SUPERSET-2024-53948 Apache Superset: Error verbosity exposes metadata in analytics databases

Generation of Error Message Containing analytics metadata Information in Apache Superset. This issue affects Apache Superset: before 4.1.0. Users are recommended to upgrade to version 4.1.0, which fixes the issue...

5.3CVSS5.1AI score0.00172EPSS
Exploits0References3
Veracode
Veracode
added 2024/12/19 7:38 a.m.7 views

Information Disclosure

apachesuperset is vulnerable to Information Disclosure. The vulnerability is due to improper handling of error messages, exposing sensitive analytics metadata, which allows an attacker to gain access to this information, potentially aiding in further attacks or revealing system details...

5.3CVSS6.7AI score0.00172EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2024/12/09 2:15 p.m.13 views

CVE-2024-53948

Generation of Error Message Containing analytics metadata Information in Apache Superset. This issue affects Apache Superset: before 4.1.0. Users are recommended to upgrade to version 4.1.0, which fixes the issue...

5.3CVSS0.00172EPSS
Exploits0References2
CVE
CVE
added 2024/12/09 1:35 p.m.81 views

CVE-2024-53948

The CVE-2024-53948 entry concerns Apache Superset prior to 4.1.0, where error message generation can expose analytics metadata. This constitutes an information disclosure vector as described in multiple sources, with a fixed version 4.1.0 recommended by the advisories. Practical impact is informa...

5.3CVSS6.5AI score0.00172EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.2 views

PT-2024-10308 · Apache · Apache Superset

Name of the Vulnerable Software and Affected Versions: Apache Superset versions prior to 4.1.0 Description: The issue is related to the generation of error messages containing analytics metadata information in Apache Superset. This can allow a remote attacker to gain unauthorized access to...

5.3CVSS7AI score0.00172EPSS
Exploits0References14
Rows per page
Query Builder