description: In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specially crafted complex query.
problem types: Information Disclosure
affected:
{
product: Apache Incubator Superset
vendor: n/a
versions:
status: affected, version: Apache Incubator Superset 0.0.0 to 0.29.0
}