CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCVE-2021-37839
Medium (4.3) in apache superset. EPSS 1.4% chance of exploitation in the next 30 days. Fixed in apache-superset 1.5.1.
Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-273
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:superset
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-748r-5r8q-273m | PyPI | apache-superset | <1.5.1 | 1.5.1 |
| PYSEC-2026-776 | PyPI | apache-superset | <1.5.1 | 1.5.1 |