CVE-2019-12414 In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list…

Description

In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab

Affected products and versions

Product	Affected versions	Fixed in
Apache Incubator Superset	Versions not published

Other CVEs of Apache Incubator Superset

The 2 CVEs of Apache Incubator Superset →

CVE-2019-12413 In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access… Not rated