CVE-2022-45438 — Apache Superset: Dashboard metadata information leak
When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using …
Published: 2023-01-16 · CVSS: 5.3 · CVSS 3.1
When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7