Metabase
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 33 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 15, 2018 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions
Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass
Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management API
Metabase SQL Injection Vulnerability
Metabase SQLi zero-day exploited in customer data-theft attacks
Metabase: Arbitrary File Read via MySQL Connection Property Injection
Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write
Metabase: Arbitrary Code Execution via Database Connection Detail Bypass
Metabase: Unsafe Deserialization of H2 Query Results
Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import
Monitor Metabase in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.