CVE-2021-37839

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-37839
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-37839.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-37839
Aliases
Published
2022-07-06T13:15:09Z
Modified
2024-10-11T09:41:29Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.

References

Affected packages

Git / github.com/apache/superset

Affected ranges

Type
GIT
Repo
https://github.com/apache/superset
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected