Today > 1 Critical | 6 High | 24 Medium vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-53948

Dec. 9, 2024, 6:15 p.m.

Product(s) Impacted

Apache Superset

  • before 4.1.0

Description

Generation of Error Message Containing analytics metadata Information in Apache Superset. This issue affects Apache Superset: before 4.1.0. Users are recommended to upgrade to version 4.1.0, which fixes the issue.

Weaknesses

CWE-209
Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

CWE ID: 209

Date

Published: Dec. 9, 2024, 2:15 p.m.

Last Modified: Dec. 9, 2024, 6:15 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

security@apache.org

References

https://lists.apache.org/ security@apache.org

http://www.openwall.com/ af854a3a-2127-422b-91ae-364da2661108