An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1.
Metrics
Affected Vendors & Products
References
History
Mon, 21 Oct 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: apache
Published: 2023-04-24T15:29:53.498Z
Updated: 2024-10-21T15:08:55.113Z
Reserved: 2023-04-17T11:47:18.487Z
Link: CVE-2023-30776
Vulnrichment
Updated: 2024-08-02T14:37:15.407Z
NVD
Status : Modified
Published: 2023-04-24T16:15:08.000
Modified: 2024-11-21T08:00:52.983
Link: CVE-2023-30776
Redhat
No data.