Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-37839

Improper access to dataset metadata information

Description

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Superset

  • Apache Superset to < 1.5.1affected

References