CVE-2024-55951

creationtimestamp| type| source ---|---|--- 2024-12-16 20:12:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113664325321574528 2024-12-16 21:33:06+00:00| seen| https://t.me/cvedetector/13032...

CVE-2024-55951

CVE-2024-55951 (Metabase) affects Metabase 1.52.x prior to 1.52.2.5, where sandboxed users could view field filter values from other sandboxed users. Root cause: sandbox isolation flaw in new sandboxing configurations created between 1.52.0 and 1.52.2.4. Impact: information disclosure within sand...

CVE-2024-55951 Metabase sandboxed users could see filter values from other sandboxed users

Metabase is an open-source data analytics platform. For new sandboxing configurations created in 1.52.0 till 1.52.2.4, sandboxed users are able to see field filter values from other sandboxed users. This is fixed in 1.52.2.5. Users on 1.52.0 or 1.52.1 or 1.5.2 should upgrade to 1.52.2.5. There ar...