CVE-2021-37839

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics...

CVE-2021-37839

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics...

CVE-2021-37839

CVE-2021-37839 affects Apache Superset up to version 1.5.1. The issue is an access control error that allows authenticated users to read metadata for datasets they have no permission on. Affected metadata includes dataset name, columns, and metrics. The root cause is described in connected source...

CVE-2021-37839 Improper access to dataset metadata information

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics...