Tag
#Metabase
4 published stories tagged with Metabase.
SQL Injection in Metabase Grants Full Administrator Access as CISA Updates KEV Catalog
CISA has added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a critical SQL injection in Metabase that grants full administrator access.
Attackers exploit critical SQL injection vulnerability to gain full administrative access to Metabase
A critical zero-day SQL injection vulnerability in Metabase has been exploited in the wild.
Unauthenticated attackers exploit Metabase SQL injection vulnerability to steal customer data and credentials
A critical zero-day SQL injection vulnerability in Metabase has been actively exploited to compromise customer instances.
Unauthenticated attackers exploit Metabase zero-day vulnerability to gain administrative access in the wild
馃毃 A zero-day vulnerability affecting Metabase is currently being exploited in the wild. Attackers are targeting identity exposure to create active attack paths within environments.