Description (CNA)
When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache Superset | affected 2.0.0 before 2.0.1; affected 0 through 1.5.2 |
CWE
CWE-668
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.