You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@superset.apache.org by Daniel Gaspar <dp...@apache.org> on 2021/11/11 13:28:07 UTC

CVE-2021-41972: Apache Superset: Credentials leak

Description:

Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way.


Mitigation:

Upgrade to Apache Superset 1.3.2 or higher

Credit:

Apache Superset team would like to thank Ke Zhu for reporting this issue

[#FMS-883-99084]: CVE-2021-41972: Apache Superset: Credentials leak

Posted by AARDEX Group <in...@medamigo.com>.

Hello,

Thank you for your interest in AARDEX Group products and services. We are processing your inquiry and a member of our staff will review and reply shortly.

If you have any additional information that you think will help us to assist you, please feel free to reply to this email.  

AARDEX Team

https://www.aardexgroup.com