Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-45438
5.3
MEDIUMCVSS v3
Published
January 16, 2023
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.
apache/superset
GitHubApache Superset is a Data Visualization and Data Exploration Platform
GitHubApache Superset is a Data Visualization and Data Exploration Platform<= 1.5.2, = 2.0.0, < 1.5.3, >= 2.0.0, < 2.0.1NVD