CVE-2019-12413
CVE-2019-12413
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specially crafted complex query.
CVSS 6.9 · Medium · EPSS 2.8% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
apache incubator superset
- Versions
- Apache Incubator Superset 0.0.0 to 0.29.0: Affected
No fix published
apache-superset PyPI
- Affected ranges
- ECOSYSTEM: < 0.31.0
Update to 0.31.0
apache-superset PyPI
- Affected ranges
- ECOSYSTEM: < 0.31
Update to 0.31