Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2022/10/26 12:0 a.m.42 views

CVE-2022-39362 Metabase vulnerable to arbitrary SQL execution from queryhash

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9, unsaved SQL queries are auto-executed, which could pose a possible attack vector. This issue is patched in versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9...

8.8CVSS8.9AI score0.0079EPSS
SaveExploits0References2
Rows per page
Query Builder