Metabase 路径遍历漏洞

Metabase is an open source data analysis platform from Metabase, Inc. An information disclosure vulnerability exists in Metabase, which stems from a lack of permission validation in the product's admin-settings-maps-custom maps-add a map operation. An attacker could obtain sensitive information...

CVE-2018-0697

Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0697

Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0697

Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0697

Metabase is affected by a cross-site scripting vulnerability (CWE-79) in version 0.29.3 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially affecting a logged-in user’s browser session. Public details across multiple s...

PT-2018-9022

Name of the Vulnerable Software and Affected Versions Metabase versions 0.29.3 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Metabase versions 0.29.3 and earlier, update to a version...

CVE-2018-0697: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Metabase Cross-Site Scripting Vulnerability

Metabase is a simple, open-source way to analyze and learn from the data you get by asking your company members questions. Metabase has a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary scripts on a logged-in user's Web browser...

Metabase vulnerable to cross-site scripting

Overview Metabase provided by Metabase, Inc. contains a reflected cross-site scripting vulnerability CWE-79. Yuuta Watanabe of STNet, Incorporated reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary...

JVN#14323043: Metabase vulnerable to cross-site scripting

Metabase provided by Metabase, Inc. contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged-in user's web browser. Solution Update the Software Update to the latest version according to the information provided by the developer...

IIS Metabase

Check the IIS Metabase for AspEnableParentPaths This script reads the IIS Metabase an get the AspEnableParentPaths configuration. OpenVAS Vulnerability Test $Id: GSHBIISmetabase.nasl 7076 2017-09-07 11:53:47Z teissa $ Check the IIS Metabase for AspEnableParentPaths Windows Authors: Thomas Rotter...

IIS Metabase

Check the IIS Metabase for AspEnableParentPaths This script reads the IIS Metabase and gets the AspEnableParentPaths configuration. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

iis.4.0.metabase.passwd.txt

Date: Mon, 22 Feb 1999 11:26:41 +0100 From: Patrick CHAMBET To: [email protected] Subject: Alert: IIS 4.0 metabase can reveal plaintext passwords Hi all, We knew that Windows NT passwords are stored in 7 different places across the system. Here is a 8th place: the IIS 4.0 metabase. IIS 4.0 uses its...