CVE-2019-12414
CVE-2019-12414
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab
CVSS 6.9 · Medium · EPSS 2.8% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
apache incubator superset
- Versions
- Apache Incubator Superset 0.0.0 to 0.31.0: Affected
No fix published
apache-superset PyPI
- Affected ranges
- ECOSYSTEM: < 0.32.0
Update to 0.32.0
apache-superset PyPI
- Affected ranges
- ECOSYSTEM: < 0.32
Update to 0.32