HNGlance

Top Best New Show

Additional critical Metabase security vulnerabilities announced today

https://www.metabase.com/blog/security-advisory-h2

by nfm • 3 years ago

3 2 3 years ago

ME

Related Stories

Loading related stories...

Comments

2

nfm• 3 years ago

Metabase announced a patch release for a critical vulnerability a little over a week ago: https://www.metabase.com/blog/security-advisory

Today they have announced further, related vulnerabilities, and if you're running your own instance you should patch again, or disable your instance until you have a chance to do so.

The vulnerabilities allow an unauthenticated attacker to run arbitrary commands with the same privileges as the Metabase server on the server you are running Metabase on. This would allow arbitrary querying of any database that Metabase is connected to.

exabrial• 3 years ago

Very important! Another update

Source preview

metabase.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms