Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/03/15 7:55 p.m.43 views

CVE-2024-28847 SpEL Injection in `PUT /api/v1/events/subscriptions` in OpenMetadata

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. Similarly to the GHSL-2023-250 issue, AlertUtil::validateExpression is also called from EventSubscriptionRepository.prepare,...

8.8CVSS9.2AI score0.02372EPSS
SaveExploits1References6
Rows per page
Query Builder