CVE-2021-37839CWE-273

Improper access to dataset metadata information

published July 6, 2022

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01371 · 71.7th percentile
Weakness
CWE-273 · Improper Check for Dropped Privileges
Published
2022-07-06T12:35Z
EPSS history
Timeline
  • 06 JUL 12:35Z
    Improper access to dataset metadata information
    cvelistv5