Information Disclosure

apache_superset is vulnerable to information disclosure. The vulnerability exists in apply function in base.py because the permission to access metadata is not properly handled which allows an attacker to gain access to sensitive information such as dataset name, columns and metrics.