CVE-2019-12414

In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab

published December 16, 2019

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02787 · 86.3th percentile
Published
2019-12-16T21:52Z
EPSS history
Timeline
  • 16 DEC 21:52Z
    In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab
    cvelistv5