ME
Product
Metabase
by · last CVE Oct 26, 2022
1
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add Metabase to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-43776
6.5
1%
Oct 26
The url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request Forgery attacks
Affected: <44.5
Showing 1