CVE-2024-55951
Metabase sandboxed users could see filter values from other sandboxed users
Résumé
Metabase sandboxed users could see filter values from other sandboxed users
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Metabase is an open-source data analytics platform. For new sandboxing configurations created in 1.52.0 till 1.52.2.4, sandboxed users are able to see field filter values from other sandboxed users. This is fixed in 1.52.2.5. Users on 1.52.0 or 1.52.1 or 1.5.2 should upgrade to 1.52.2.5. There are no workarounds for this issue aside from upgrading.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web downloads.metabase.com
- web hub.docker.com