title: Improper access to dataset metadata information
description: Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.
problem types: CWE-273 Improper Check for Dropped Privileges
affected:
{
product: Apache Superset
vendor: Apache Software Foundation
versions:
lessThan: 1.5.1, status: affected, version: Apache Superset, versionType: custom
}
workarounds: Upgrade to 1.5.1 or higher