CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2023-30776
Medium (6.5) in apache superset. EPSS 2.1% chance of exploitation in the next 30 days. Fixed in apache-superset 2.1.0.
An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1.
Severity
- EPSS
- 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- CWE
- CWE-522
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:superset
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cmjc-52fg-9f7j | PyPI | apache-superset | >=1.3.0 <2.1.0 | 2.1.0 |
| PYSEC-2026-1171 | PyPI | apache-superset | >=1.3.0 <2.1.0 | 2.1.0 |