CVEvulnerability

CVE-2021-37839

4.3 MEDIUM Published 2022-07-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-273

Description

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.

Affected configurations

• apache superset (<= 1.5.1)

Related

Weakness · CWE (1)

  • CWE-273 Improper Check for Dropped Privileges weakness

References