CVE-2020-1932

An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1

published January 28, 2020

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed passwords, by accessing an unused and undocumented API endpoint on Apache Superset.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01351 · 71.3th percentile
Published
2020-01-28T00:38Z
EPSS history
Timeline
  • 28 JAN 00:38Z
    An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1
    cvelistv5