Lucene search
+L

1 matches found

OSV
OSV
added 2022/10/26 12:0 a.m.29 views

CVE-2022-39362 Metabase vulnerable to arbitrary SQL execution from queryhash

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9, unsaved SQL queries are auto-executed, which could pose a possible attack vector. This issue is patched in versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9...

8.8CVSS8.6AI score0.0079EPSS
SaveExploits0References4
Rows per page
Query Builder