← CVE Intelligence

CVE-2021-37839

Improper access to dataset metadata information PUBLISHED

Description (CNA)

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Supersetaffected Apache Superset before 1.5.1

CWE

CWE-273

References

ADP enrichment

CVE

No English description supplied.