What is the vulnerability ID for this Apache Superset vulnerability?

The vulnerability ID for this Apache Superset vulnerability is CVE-2021-37839.

What is the severity level of CVE-2021-37839?

The severity level of CVE-2021-37839 is medium.

What is the remedy for CVE-2021-37839?

The remedy for CVE-2021-37839 is to update to Apache Superset version 1.5.1 or later.

Where can I find more information about CVE-2021-37839?

You can find more information about CVE-2021-37839 at the following references: [NVD](https://nvd.nist.gov/vuln/detail/CVE-2021-37839), [Apache Mailing List](https://lists.apache.org/thread/pwqyxxmn5gh7cnw3qsp66v0lt4xojt82), [GitHub Commit](https://github.com/apache/superset/commit/2bd89d1705347da5446902a3f65eb8d0a6353503).

Vulnerability/
CVE-2021-37839

medium

4.3

CWE

273

6/7/2022

7/7/2022

4/8/2024

CVE-2021-37839: Improper access to dataset metadata information

Q: How does CVE-2021-37839 affect Apache Superset?

CVE-2021-37839 allows authenticated users to access metadata information related to datasets they have no permission on.

First published: Wed Jul 06 2022(Updated: )

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.

Credit: security@apache.org

Affected Software	Affected Version	How to fix
pip/apache-superset	<1.5.1	1.5.1
Apache Superset	<=1.5.1

Never miss a vulnerability like this again

Reference Links

https://lists.apache.org/thread/pwqyxxmn5gh7cnw3qsp66v0lt4xojt82

Frequently Asked Questions

What is the vulnerability ID for this Apache Superset vulnerability?
The vulnerability ID for this Apache Superset vulnerability is CVE-2021-37839.
What is the severity level of CVE-2021-37839?
The severity level of CVE-2021-37839 is medium.
How does CVE-2021-37839 affect Apache Superset?
CVE-2021-37839 allows authenticated users to access metadata information related to datasets they have no permission on.
What is the remedy for CVE-2021-37839?
The remedy for CVE-2021-37839 is to update to Apache Superset version 1.5.1 or later.
Where can I find more information about CVE-2021-37839?
You can find more information about CVE-2021-37839 at the following references: [NVD](https://nvd.nist.gov/vuln/detail/CVE-2021-37839), [Apache Mailing List](https://lists.apache.org/thread/pwqyxxmn5gh7cnw3qsp66v0lt4xojt82), [GitHub Commit](https://github.com/apache/superset/commit/2bd89d1705347da5446902a3f65eb8d0a6353503).

collector/github-advisory-latest
alias/GHSA-748r-5r8q-273m
alias/CVE-2021-37839
collector/github-advisory
collector/nvd-index
agent/type
agent/softwarecombine
agent/references
collector/mitre-cve
source/MITRE
agent/title
agent/last-modified-date
agent/weakness
agent/description
agent/first-publish-date
agent/severity
agent/author
agent/event
agent/tags
agent/trending
package-manager/pip
vendor/apache
canonical/apache superset
version/apache superset/1.5.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.