370 matches found
Metabase SQL Injection Vulnerability
Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance. From there, the attacker could change the application configuration, steal store...
Metabase 0.63.4 SQL Injection
A proof of concept exploit for an unauthenticated SQL injection vulnerability in Metabase version 0.63.4. The vulnerability allows an attacker-controlled user-id value supplied to the password reset endpoint to reach a HoneySQL query as raw SQL. On installations using the default embedded H2...
Metabase 0.63.4 SQL Injection
A proof of concept exploit for an unauthenticated SQL injection vulnerability in Metabase version 0.63.4. The vulnerability exists in public shared cards containing field-filter template tags, where a specially structured parameter value can be interpreted by HoneySQL as raw query structure rathe...
CVE-2026-72899
Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...
CVE-2026-72900
Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database...
CVE-2026-72898
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...
EUVD-2026-55692
Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database...
CVE-2026-72900
Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database...
CVE-2026-72900 Metabase information exposure
Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database...
CVE-2026-72900
CVE-2026-72900 affects Metabase. The authenticated, low-privileged attacker can read the entire Metabase application database, indicating a complete disclosure of stored data within the Metabase instance. The available documents describe the exposure without detailing exploitation steps or specif...
CVE-2026-72899 Metabase SQL injection via public card or dashboard
Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...
EUVD-2026-55691
Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...
CVE-2026-72899
Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...
CVE-2026-72899
Metabase is affected by CVE-2026-72899: an unauthenticated SQL injection via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter. The flaw enables arbitrary SQL injection through the field-filter input; exploitation details are not provided beyond access to a pub...
EUVD-2026-55690
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...
CVE-2026-72898 Metabase SQL injection via password reset endpoint
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...
CVE-2026-72898
Metabase is affected by CVE-2026-72898: an unauthenticated attacker can inject arbitrary SQL through the /reset_password endpoint, forging an administrator session and gaining full access to the Metabase instance. The root cause, as described in PoC materials, is that the password-reset API accep...
CVE-2026-72898
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...
CVE-2026-72898 Metabase SQL injection via password reset endpoint
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...
