CVE-2019-12413

2019-12-1621:53:26

apache

www.cve.org

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specially crafted complex query.

CNA Affected

[
  {
    "product": "Apache Incubator Superset",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Incubator Superset 0.0.0 to 0.29.0"
      }
    ]
  }
]