Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase

CVE-2021-41277 Usage 1. show help info bash /CVE...

CVE-2021-41277

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map "admin-settings-maps-custom maps-add a map" support and potential local file inclusion including environment variables. URLs were not validated prior to being...

CVE-2021-41277: Exposure of Sensitive Information to an Unauthorized Actor

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...