Lucene search
+L

1 matches found

OSV
OSV
added 2026/01/08 3:12 p.m.10 views

CVE-2026-22244 OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE

OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code execution via Server-Side Template Injection SSTI in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch...

9.4CVSS7.9AI score
SaveExploits0References4
Rows per page
Query Builder