CVE-2026-72898

CVE-2026-72898 Metabase パスワードリセット 未認証SQLインジェクション ★ CVE-2026-72898 Metabase /api/session/resetpassword 未認証ブラインドSQLi PoC ★ https://github.com/user-attachments/assets/4efe5ae3-2a41-4567-815b-ee3f731a5a59 概要 CVE-2026-72898 は、Metabase における未認証SQLインジェクション （CVSS 10.0）であり、公開されている POST...

metabase-sql-poc

CVE-2026-72898 — Metabase Unauthenticated SQL Injection PoC...

Exploit for SQL Injection in Metabase

CVE-2026-72898 Metabase password-reset unauthenticated SQL inj...

Exploit for SQL Injection in Metabase

CVE-2026-72898 — Metabase unauthenticated SQL injection detec...

Metabase 0.63.4 SQL Injection

A proof of concept exploit for an unauthenticated SQL injection vulnerability in Metabase version 0.63.4. The vulnerability exists in public shared cards containing field-filter template tags, where a specially structured parameter value can be interpreted by HoneySQL as raw query structure rathe...

SQL Injection

Overview honeysql:honeysql is a SQL as Clojure data structures. Build queries programmatically -- even at runtime -- without having to bash strings together. Affected versions of this package are vulnerable to SQL Injection via seq-sql function in format.cljc file. Remediation Upgrade...