description: In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab
problem types: Information Disclosure
affected:
{
product: Apache Incubator Superset
vendor: n/a
versions:
status: affected, version: Apache Incubator Superset 0.0.0 to 0.31.0
}