BIT-superset-2023-39264

vendorUSosv

Apache Superset: Stack traces enabled by default

view advisory published 2025-02-05Licence: per source

By default, stack traces for errors were enabled, which resulted in the exposure of internal traces on REST API endpoints to users. This vulnerability exists in Apache Superset versions up to and including 2.1.0.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-39264US	medium4.3	1.13% (66th)	—	2023-09-06
By default, stack traces for errors were enabled, which resulted in the exposure of internal traces on REST API endpoints to users. This vulnerability exists in Apache Superset ver…

references

External citations — patches, advisories, analysis.

https://lists.apache.org/thread/y65t1of7hb445n86o1vdzjct7rfwlx75DISCUSSION
https://nvd.nist.gov/vuln/detail/CVE-2023-39264WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan