EIP-2026-104164

This exploit demonstrates a time-based account enumeration vulnerability in Apache Superset 1.1.0 by measuring the response time for login attempts with different usernames. The longer response times indicate valid usernames due to the application's behavior during authentication.