UpHeron
All vulnerabilities

Servers and applications

CVE-2021-37839

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.

Severity
Medium 4.3
Published
6 Jul 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache SupersetServers and applications · cpe:a:apache:superset
  • Every version up to 1.5.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-37839
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-37839