299,759
Total vulnerabilities in the database
When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.
| Software | From | Fixed in |
|---|---|---|
| apache / superset | - | 1.5.2.x |
| apache / superset | 2.0.0-rc1 | 2.0.0-rc1.x |
| apache / superset | 2.0.0-rc2 | 2.0.0-rc2.x |
| apache / superset | 2.0.0 | 2.0.0.x |
apache-superset
|
- | 1.5.2.x |
apache-superset
|
2.0.0 | 2.0.0.x |