github_osv/GHSA-p5w7-qmq6-pmjr
Users able to query database metadata in Apache Superset
In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specially crafted complex query.
gitlab/pypi/apache-superset/CVE-2019-12413
Information Exposure
In Apache Incubator Superset, a user could query database metadata information from a database he has no access to, by using a specially crafted complex query.