
oss-sec mailing list archives
[CVE-2019-12413] Apache Incubator Superset meta data leak vulnerability
From: daniel gaspar <danielvazgaspar () gmail com>
Date: Mon, 16 Dec 2019 14:16:30 +0000
Severity: Low Vendor: The Apache Software Foundation Product: Apache Incubator Superset Versions Affected: Superset < 0.31 Description: A user could query database metadata information from a database he has no access to, by using a specially crafted complex query. Mitigation: Superset users with version prior to 0.31 should upgrade to 0.31 or higher
Current thread:
- [CVE-2019-12413] Apache Incubator Superset meta data leak vulnerability daniel gaspar (Dec 16)