CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects Apache. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-45438
Severity
MEDIUM
CVSS
5.3
EPSS
1.23%
Apache
Original NVD Description
When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)