metabase news
2 stories
U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, mandating federal agencies to address them promptly. The newly cataloged flaws include a critical SQL injection vulnerability in Metabase, a use-after-free flaw in Microsoft Windows' Ancillary Function Driver for WinSock, and a heap…
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase has issued a critical alert regarding a zero-day vulnerability in its business intelligence software that is actively being exploited in the wild. The flaw reportedly allows unauthenticated attackers to achieve administrator access, facilitating credential theft and data exfiltration. Metabase Cloud instances have been patched, and self-hosted users are urged to update their…