CVE-2025-32382

creationtimestamp| type| source ---|---|--- 2025-04-10 14:50:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11240 2025-04-10 15:32:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhta3tmlp2i 2025-04-10 19:32:36+00:00| seen|...

CVE-2025-32382

Metabase (open source) had a vulnerability where, when admins updated Snowflake connection details, older connection credentials could remain in the application database. Metabase would cycle connection methods and, upon a successful one, log the details including username and password, risking c...