CVE-2023-42505 — Apache Superset: Sensitive information disclosure on db connection details

CVE-2023-42505

Apache Superset: Sensitive information disclosure on db connection details PUBLISHED

Description (CNA)

An authenticated user with read permissions on database connections metadata could potentially access sensitive information such as the connection's username. This issue affects Apache Superset before 3.0.0.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Superset	affected 0 before 3.0.0

CWE

CWE-200

References

https://lists.apache.org/thread/bd0fhtfzrtgo1q8x35tpm8ms144d1t2y
http://www.openwall.com/lists/oss-security/2023/11/28/5

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/bd0fhtfzrtgo1q8x35tpm8ms144d1t2y
http://www.openwall.com/lists/oss-security/2023/11/28/5