CVE-2021-44451

—

CVSS 3.1

6.5 medium

EPSS

8%p94

Published

Feb 1, 2022 (Feb 1, 2022)

Modified

Jun 17, 2026

Description

Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.

Vendors: apache
Products: superset
Weakness: CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.9%)

In the news0 stories

No ingested article mentions this CVE yet.