CVE-2023-42505

Publication date

2023-11-28 16:26:58

Family

apache

State

PUBLISHED

Description

An authenticated user with read permissions on database connections metadata could potentially access sensitive information such as the connections username. This issue affects Apache Superset before 3.0.0.