Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-39264

Apache Superset: Stack traces enabled by default

Description

By default, stack traces for errors were enabled, which resulted in the exposure of internal traces on REST API endpoints to users. This vulnerability exists in Apache Superset versions up to and including 2.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Superset

Default version status: unaffected

  • 0 to ≤ 2.1.0affected

References