Apache Superset allowed for database connections password leak for authenticated users
Moderate severity
GitHub Reviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Sep 12, 2024
Description
Published by the National Vulnerability Database
Nov 12, 2021
Published to the GitHub Advisory Database
May 24, 2022
Reviewed
Jun 21, 2022
Last updated
Sep 12, 2024
Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way.
References