Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-30776

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cmjc-52fg-9f7j

Apache Superset vulnerable to Exposure of Sensitive Information An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1.

gitlab/pypi/apache-superset/CVE-2023-30776

Insufficiently Protected Credentials An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1.

gitlab/pypi/superset/CVE-2023-30776

Insufficiently Protected Credentials An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1.