API sensitive information leak
18Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 7.9%
probabilidad de explotación
7.9%top 6% de las CVE
explotación observada
noninguna fuente lo reporta
Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.
Productos afectados
Apache Software Foundation · Apache Superset