CVE-2025-55675

Name of the Vulnerable Software and Affected Versions: Apache Superset versions prior to 5.0.0

Description: Apache Superset contains an improper access control issue in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasource id in the URL, an attacker can enumerate and confirm the existence and names of protected datasources, leading to sensitive information disclosure.

Recommendations: Upgrade to version 5.0.0.