CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/22 5:41 p.m.•7 views

CVE-2020-1932

An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed passwords, by accessing an unused and undocumented API endpoint on Apache Superset...

6.5CVSS6.4AI score0.01351EPSS

Exploits0

OSV•added 2020/01/28 1:15 a.m.•17 views

CVE-2020-1932

6.5CVSS6.2AI score

Exploits0References1

NVD•added 2020/01/28 1:15 a.m.•25 views

CVE-2020-1932

6.5CVSS6.2AI score0.01351EPSS

Exploits0References1

CVE•added 2020/01/28 12:38 a.m.•140 views

CVE-2020-1932

CVE-2020-1932: Information disclosure in Apache Superset versions 0.34.0–0.35.1. Authenticated users can access an unused, undocumented API endpoint to retrieve other users’ data, including hashed passwords. Root cause is an exposed API path that allows leaking user records to logged-in users; ex...

6.5CVSS6.1AI score0.01351EPSS

Exploits0References1Affected Software1