Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1, 0.44.7.1, 1.44.7.1, 0.43.7.2, and 1.43.7.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HMetabase
APPMetabase< 0.43.7.2< 1.43.7.20.44.0 – 0.44.7.1 (bez)0.45.0 – 0.45.4.1 (bez)0.46.0 – 0.46.6.1 (bez)1.44.0 – 1.44.7.1 (bez)1.45.0 – 1.45.4.1 (bez)1.46.0 – 1.46.6.1 (bez)
Related vulnerabilities
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered ...
Metabase is an open-source business intelligence and analytics platform. Prior to versions 0.43.7.3, 0.44.7.3,...
Metabase is an open source business intelligence and embedded analytics tool. In Metabase Enterprise prior to ...
Metabase is an open-source data analytics platform. In versions prior to 0.57.13 and versions 0.58.x through 0...
Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.4...