https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:17:31 +0000 https://cve.radiocsirt.org/vuln/cve-2025-55675 <p><strong>Affected:</strong> Apache Software Foundation Apache Superset</p> <p>Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasource_id in the URL, an attacker can enumerate and confirm the existence and names of protected datasources, leading to sensitive information disclosure.</p> <p>This issue affects Apache Superset: before 5.0.0.</p> <p>Users are recommended to upgrade to version 5.0.0, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Superset</p> <p>Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasource_id in the URL, an attacker can enumerate and confirm the existence and names of protected datasources, leading to sensitive information disclosure.</p> <p>This issue affects Apache Superset: before 5.0.0.</p> <p>Users are recommended to upgrade to version 5.0.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2025-55675 https://cve.radiocsirt.org/vuln/ghsa-mhpq-m962-mg92 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasource_id in the URL, an attacker can enumerate and confirm the existence and names of protected datasources, leading to sensitive information disclosure.</p> <p>This issue affects Apache Superset: before 5.0.0.</p> <p>Users are recommended to upgrade to version 5.0.0, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasource_id in the URL, an attacker can enumerate and confirm the existence and names of protected datasources, leading to sensitive information disclosure.</p> <p>This issue affects Apache Superset: before 5.0.0.</p> <p>Users are recommended to upgrade to version 5.0.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-mhpq-m962-mg92