Skip to content
Sign in
Not rated

CVE-2019-12413 In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access…

Description

In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specially crafted complex query.

Affected products and versions

Product Affected versions Fixed in
Apache Incubator Superset Versions not published

Other CVEs of Apache Incubator Superset

The 2 CVEs of Apache Incubator Superset →
CVE-2019-12414 In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list… Not rated
Track this CVE