Vulnerabilidades em metabase

29 resultados
Análise Vexday

Metabase apresenta 24 CVEs catalogadas com 5 em nível crítico, mas apenas 1 sob exploração ativa conhecida, indicando risco moderado. A fraqueza dominante é exposição de informações (CWE-200), e a descoberta de 4 vulnerabilidades nos últimos 90 dias sugere superfície de ataque ainda em evolução, demandando monitoramento contínuo de patches.

CVE-2024-55951MEDIUMMetabase sandboxed users could see filter values from other sandboxed usersEPSS 0.4%CVE-2026-86116HIGHMetabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management APIEPSS 0.4%CVE-2025-30371LOWMetabase vulnerable to circumvention of local link access protection in GeoJson endpointEPSS 0.4%CVE-2026-72900HIGHMetabase information exposureEPSS 0.4%CVE-2023-23629MEDIUMMetabase subject to Improper Privilege ManagementEPSS 0.4%CVE-2025-32382LOWSnowflake credentials logged by the Metabase backendEPSS 0.4%CVE-2025-27141MEDIUMMetabase Enterprise Edition allows cached questions to leak data to impersonated usersEPSS 0.4%CVE-2026-50147HIGHMetabase: Arbitrary File Read via MySQL Connection Property InjectionEPSS 0.3%CVE-2026-22805LOWMetabase channel test endpoint can reach internal local addressesEPSS 0.2%