DevBleepingComputerabout 2 hours ago
Metabase SQLi zero-day exploited in customer data-theft attacks
1 min read
A critical Metabase SQL injection zero-day was exploited in data-theft attacks, impacting Framework and Tally. The unauthenticated flaw grants administrator access and affects versions 1.58 and above. Metabase patched all branches from 0.58 through 0.63, with minimum safe releases including 0.58.24 and 0.63.5.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
