NCSC-VD-2608-002-02
مستوى الخطورة: حرجة
الرقم المرجعي: NCSC-VD-2608-002-02
Metabase
الوصف
CVE-2026-72898: An unauthenticated remote attacker can inject arbitrary SQL into the Metabase application database through /api/session/reset_password and gain administrator access to the instance.
الثغرات
- CVE-2026-72898
An unauthenticated remote attacker can inject arbitrary SQL into the Metabase application database through /api/session/reset_password and gain administrator access to the instance.