CyberRota Analysis
AI-GeneratedMetabase is vulnerable to SQL injection attacks through publicly shared cards or dashboards that expose field-filter parameters, allowing unauthenticated attackers to execute arbitrary SQL queries. This critical vulnerability can lead to unauthorized data access and manipulation, posing significant risks to data integrity and confidentiality. Organizations using Metabase should prioritize immediate remediation to safeguard their databases against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.