CVE-2024-53948: Apache Superset: Error verbosity exposes metadata in analytics databases
Published Dec 9, 2024
·Updated
Generation of Error Message Containing analytics metadata Information in Apache Superset.
This issue affects Apache Superset: before 4.1.0.
Users are recommended to upgrade to version 4.1.0, which fixes the issue.
Affected Software
2 affected componentsFixes available
pip/apache-superset<4.1.0
4.1.0
Apache Superset<4.1.0
Event History
Dec 9, 2024
CVE Published
via MITRE·01:35 PM
Data Sourced
via MITRE·01:35 PM
DescriptionWeakness
Advisory Published
via GitHub·03:31 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-53948?
CVE-2024-53948 is classified as a moderate risk vulnerability affecting Apache Superset.
2
How do I fix CVE-2024-53948?
To fix CVE-2024-53948, upgrade Apache Superset to version 4.1.0 or higher.
3
What is affected by CVE-2024-53948?
CVE-2024-53948 impacts all versions of Apache Superset prior to 4.1.0.
4
What kind of information does CVE-2024-53948 expose?
CVE-2024-53948 may generate error messages that inadvertently contain analytics metadata.
5
When was CVE-2024-53948 discovered?
CVE-2024-53948 was addressed in Apache Superset's updates prior to version 4.1.0.