CVE-2021-44451

CVE-2021-44451 is a medium-severity vulnerability affecting Apache Superset versions up to and including 1.3.2, allowing authenticated users to potentially leak database connection passwords. The attack is network-based with low complexity, requiring prior authentication to achieve high confidentiality impact. While no active exploitation or public exploit code is reported, its high FAUCET Risk Score and EPSS percentile indicate a significant potential for future exploitation.