CVE-2019-12413

published 2019-12-16

CVE-2019-12413: In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specially crafted…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specially crafted complex query.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apache	superset	< 0.31	0.31

CWE-200