CVE-2025-55673

published 2025-08-14

CVE-2025-55673: When a guest user accesses a chart in Apache Superset, the API response from the /chart/data endpoint includes a query field in its payload. This field…

medium 5.3 CVSS 4.0

AV N AC L AT N PR L UI N VC L VI N VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

When a guest user accesses a chart in Apache Superset, the API response from the /chart/data endpoint includes a query field in its payload. This field contains the underlying query, which improperly discloses database schema information, such as table names, to the low-privileged guest user.

This issue affects Apache Superset: before 4.1.3.

Users are recommended to upgrade to version 4.1.3, which fixes the issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	superset	< 4.1.3	4.1.3
apache_software_foundation	apache_superset	< 4.1.3	4.1.3

CWE-200