Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-45438

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-8f5j-mgx9-5hm5

Apache Superset has Improper Access Control When explicitly enabling the feature flag `DASHBOARD_CACHE` (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

gitlab/pypi/apache-superset/CVE-2022-45438

Improper Access Control When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

gitlab/pypi/superset/CVE-2022-45438

Exposure of Resource to Wrong Sphere When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.