Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Dinesh

#52025of 53,624
4.3Total CVSS
Vulnerabilities · 1
PT-2022-10673
4.3
2022-07-06
Apache · Apache Superset · CVE-2021-37839
**Name of the Vulnerable Software and Affected Versions** Apache Superset versions up to 1.5.1 **Description** The issue allows authenticated users to access metadata information related to datasets they have no permission on. This metadata includes the dataset name, columns, and metrics. **Recommendations** For Apache Superset versions up to 1.5.1, update to a version later than 1.5.1 to resolve the issue. As a temporary workaround, consider restricting access to metadata information for authenticated users until a patch is available.