CVE-2020-1932

An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retri...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed passwords, by accessing an unused and undocumented API endpoint on Apache Superset.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami superset

[{"type":"SEMVER","events":[{"introduced":"0.34.0"},{"fixed":"0.34.1"},{"introduced":"0.34.1"},{"fixed":"0.34.2"},{"introduced":"0.35.0"},{"fixed":"0.35.1"},{"introduced":"0.35.1"},{"fixed":"0.35.2"}]}]

Références

advisory lists.apache.org
web nvd.nist.gov