CVE-2021-44451: API sensitive information leak
Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-44451?
CVE-2021-44451 is a vulnerability in Apache Superset up to and including version 1.3.2 that allows for registered database connections password leak for authenticated users.
How can the password leak vulnerability in Apache Superset be exploited?
The password leak vulnerability in Apache Superset can be exploited by authenticated users to access the registered database connections password in a non-trivial way.
What is the severity of CVE-2021-44451?
The severity of CVE-2021-44451 is medium with a CVSS score of 6.5.
How can I fix the password leak vulnerability in Apache Superset?
To fix the password leak vulnerability in Apache Superset, users should upgrade to version 1.4.0 or higher.
Where can I find more information about CVE-2021-44451?
You can find more information about CVE-2021-44451 on the NIST NVD website and the Apache Superset mailing list and GitHub advisory.