Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
4 / 9 results
criticalbug_reportVulnerabilityMetabase SQL injection under active exploitation, patch immediately
Metabase open-source business intelligence platform. Specific affected versions not disclosed in advisory. SQL injection vulnerability allows unauthorized database access.
criticalbug_reportVulnerabilityCritical SQL injection in Metabase requires immediate patching
Metabase (specific affected versions not disclosed in advisory). SQL injection vulnerability impacts database query functionality.
criticalbug_reportVulnerabilityMetabase zero-day (CVSS 10.0) exploited for unauthenticated admin access
Metabase versions 1.58.0 through 1.63.2 (all self-hosted and cloud instances). Specifically: 1.58.0–1.58.23, 1.59.0–1.59.20, 1.60.0–1.60.16, 1.61.0–1.61.10, 1.62.0–1.62.8, and 1.63.0–1.63.2. Metabase Cloud instances already patched.
criticalbug_reportVulnerabilityMetabase SQL injection zero-day exploited to steal customer data
Metabase (specific versions not disclosed). Confirmed victims include Framework and Tally customer instances. All unpatched Metabase deployments potentially at risk.