Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-53948 BIT-superset-2024-53948EUVD-2024-3408GHSA-2cx9-54hp-r698PYSEC-2026-1154

Apache Superset: Error verbosity exposes metadata in analytics databases

Published Dec 9, 2024 · Updated Dec 9, 2024 · Assigned by apache

Description

Generation of Error Message Containing analytics metadata Information in Apache Superset.

This issue affects Apache Superset: before 4.1.0.

Users are recommended to upgrade to version 4.1.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Superset < 4.1.0 4.1.0

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-superset < 4.1.0 4.1.0 GHSA-2cx9-54hp-r698

Advisories 1

References