| Package | Affected versions | Patched versions |
|---|---|---|
| apache-superset | ≥ 1.3.0, < 2.1.0 | 2.1.0 |
| superset | ≥ 1.3.0, ≤ 2.0.1 |
An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free