CVE-2023-42505

Summary

CVE-2023-42505 is a vulnerability affecting Apache Superset versions prior to 3.0.0. An authenticated user with read permissions on database connections metadata can gain unauthorized access to sensitive information, including the connection's username. This issue poses a potential security risk as unauthorized access to database connection details can lead to further exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.