Apache Superset Information Disclosure Vulnerability (CNVD-2023-9666229)

Apache Superset is a data visualization and data exploration platform from the Apache (USA) Foundation. An information disclosure vulnerability exists in Apache Superset versions prior to 3.0.0, which stems from the application’s inadequate protection of sensitive information and can be exploited by an authenticated attacker to access sensitive information.