Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-42505

Apache Superset: Sensitive information disclosure on db connection details

Description

An authenticated user with read permissions on database connections metadata could potentially access sensitive information such as the connection's username. This issue affects Apache Superset before 3.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Superset

Default version status: unaffected

  • 0 to < 3.0.0affected

References