Количество 2
Количество 2
CVE-2022-45438
When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.
GHSA-8f5j-mgx9-5hm5
Apache Superset has Improper Access Control
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-45438 When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0. | CVSS3: 5.3 | 3% Низкий | около 3 лет назад | |
GHSA-8f5j-mgx9-5hm5 Apache Superset has Improper Access Control | CVSS3: 5.3 | 3% Низкий | около 3 лет назад |
Уязвимостей на страницу