Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/21 4:36 p.m.21 views

OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users

This is not applicable if an application is configuring the Secrets Store to store credentials. Please make sure to follow the best practices when deploying in production In OpenMetadata 1.12.1, a non-admin SSO user can trigger a TESTCONNECTION workflow for a Database Service and receive, in the...

8.3CVSS5.8AI score0.00241EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder