SecurityThe Hacker Newsabout 3 hours ago
Metabase Zero-Day Exploited for Admin Access
1 min read
Metabase disclosed a maximum-severity zero-day (CVSS 10.0) allowing unauthenticated SQL injection and admin access, exploited in the wild. Affected versions include x.59.0 through x.63.3. Framework confirmed customer data exposure. Patches are available; blocking "/api/session/reset_password" is a temporary workaround.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
