Filter
-Infinity
0
Trending
MetabaseMetabase vulnerable to circumvention of local link access protection in GeoJson endpoint
2.1
EPSS
0.04%
First published (updated )
MetabaseMetabase Enterprise Edition allows cached questions to leak data to impersonated users
6.5
EPSS
0.03%
First published (updated )
MetabaseMetabase sandboxed users could see filter values from other sandboxed users
4.8
First published (updated )
MetabaseMetabase vulnerable to remote code execution via POST /api/setup/validate API endpoint
10
First published (updated )
MetabaseMetabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to exec…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MetabaseMissing SQL permissions check in metabase
9.6
First published (updated )
MetabaseMetabase subject to Improper Privilege Management
6.3
First published (updated )
MetabaseMetabase subject to Exposure of Sensitive Information to an Unauthorized Actor
5.7
First published (updated )
MetabaseMetabase vulnerable to circumvention of Locked parameter in Signed Embedding
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MetabaseMetabase's GeoJSON validation doesn't prevent redirects to blocked URLs
6.5
First published (updated )
MetabaseMetabase SSO users able to circumvent IdP login by doing password reset
6.5
First published (updated )
MetabaseMetabase vulnerable to Remote Code Execution via H2
8.8
First published (updated )
MetabaseMetabase vulnerable to arbitrary SQL execution from queryhash
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MetabaseDatabase bypassing any permissions in Metabase via SQlite attach
8.8
First published (updated )
MetabaseMetabase GeoJSON API Local File Inclusion Vulnerability
First published (updated )