Threats tagged 'ghsa-mhpq-m962-mg92'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.6%	CVE-2025-55675Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access Medium5.3EPSS 0.6%2025-08-14GCVE DatabaseCVE-2025-55675 Apache Superset before version 5.0.0 has an improper access control vulnerability in the /explore endpoint. Authenticated users can bypass authorization checks to discover metadata about datasources they are not permitted to access by enumerating datasource IDs. This leads to sensitive information disclosure. The issue is fixed in version 5.0.0. EPSS 0.6%Report on CVE-2025-55675 Vulnerability CWE-285 #ghsa-mhpq-m962-mg92 #pypi	GCVE Database	2025-08-14

Page 1 of 1