CVE-2021-41972

Credentials leak

概要

Credentials leak

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami superset

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.3.2"}]}]

参照URL

advisory lists.apache.org
advisory seclists.org
web nvd.nist.gov