CVE-2023-37470

🗓️ 04 Aug 2023 15:12:43Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 2509 Views🌐 WEB

Prior to versions 0.43.7.3, 0.44.7.3, 0.45.4.3, 0.46.6.4, and 1.43.7.3, a vulnerability allows remote code execution in Metabase

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-37470	4 Aug 202320:40	–	circl
CNNVD	Metabase Code Injection Vulnerability	4 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-37470 Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint	4 Aug 202315:12	–	cvelist
EUVD	EUVD-2023-41366	3 Oct 202520:07	–	euvd
Tenable Nessus	Metabase 0.43.x < 0.43.7.3 / 0.44.x < 0.44.7.3 /0.45.x < 0.45.4.3 / 0.46.x < 0.46.6.4 / 1.43.x < 1.43.7.3 / 1.44.x < 1.44.7.3 / 1.45.x < 1.45.4.3 / 1.46.x < 1.46.6.4	9 Sep 202500:00	–	nessus
NVD	CVE-2023-37470	4 Aug 202316:15	–	nvd
OSV	CVE-2023-37470 Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint	4 Aug 202315:12	–	osv
Prion	Design/Logic Flaw	4 Aug 202316:15	–	prion
Positive Technologies	PT-2023-5110 · H2 +2 · H2 +2	4 Aug 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-37470 Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint	4 Aug 202315:12	–	vulnrichment

NVD

Vulners

Node

metabase metabaseRange<0.43.7.3-

metabase metabaseRange<1.43.7.3enterprise

metabase metabaseRange0.44.0–0.44.7.3-

metabase metabaseRange0.45.0–0.45.4.3-

metabase metabaseRange0.46.0–0.46.6.4-

metabase metabaseRange1.44.0–1.44.7.3enterprise

metabase metabaseRange1.45.0–1.45.4.3enterprise

metabase metabaseRange1.46.0–1.46.6.4enterprise

[
  {
    "vendor": "metabase",
    "product": "metabase",
    "versions": [
      {
        "version": "< 0.43.7.3",
        "status": "affected"
      },
      {
        "version": ">= 0.44.0.0, < 0.44.7.3",
        "status": "affected"
      },
      {
        "version": ">= 0.45.0.0, < 0.45.4.3",
        "status": "affected"
      },
      {
        "version": ">= 0.46.0.0, < 0.46.6.4",
        "status": "affected"
      },
      {
        "version": ">= 1.0.0, < 1.43.7.3",
        "status": "affected"
      },
      {
        "version": ">= 1.44.0.0, < 1.44.7.3",
        "status": "affected"
      },
      {
        "version": ">= 1.45.0.0, < 1.45.4.3",
        "status": "affected"
      },
      {
        "version": ">= 1.46.0.0, < 1.46.6.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/metabase/metabase/security/advisories/GHSA-p7w3-9m58-rq83

Parameter	Position	Path	Description	CWE
connectionString	request body	/api/database	Vulnerability vector via user-supplied database connection string during database creation (POST /api/database).	CWE-94
id	path	/api/database/:id	Vulnerability vector via user-supplied database connection string during database update (PUT /api/database/:id).	CWE-94
connectionString	path	/api/database/:id	Vulnerability vector via user-supplied database connection string during database update (PUT /api/database/:id).	CWE-94
connectionString	request body	/api/setup/validateuntil	Vulnerability vector via validation API that can be abused by providing a crafted connection string (POST /api/setup/validateuntil).	CWE-94

21 Nov 2024 08:11Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8 - 10

EPSS0.03148

SSVC

CWE-94