Skip to content
Noroxi

metabase records

26 published records for vendor metabase.

Researcher profile

Entered KEV
2 · 7.7%
Weaponized
3 · 11.5%
Pre-auth RCE
2
With a fix record
3.8%
Median publish → KEV
546 days

Records by year

  1. 18
  2. 21
  3. 22
  4. 23
  5. 25
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

26 records
  • CVE-2021-41277
    89Now

    GeoJSON URL validation can expose server files and environment variables to unauthorized users

    HighCVSS 7.5KEVWeaponizedEPSS 97%

    metabase · metabaseNov 17, 2021

  • CVE-2026-72898
    76This week

    Metabase SQL injection via password reset endpoint

    CriticalCVSS 10.0KEVWeaponizedEPSS 19%

    metabase · metabaseAug 10, 2026

  • CVE-2023-38646
    69This week

    Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at

    CriticalCVSS 9.8WeaponizedEPSS 99%

    metabase · metabaseJul 21, 2023

  • CVE-2023-37470
    39Monitor

    Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint

    CriticalCVSS 9.8No exploitEPSS 1%

    metabase · metabaseAug 4, 2023

  • CVE-2023-32680
    38Monitor

    Missing SQL permissions check in metabase

    CriticalCVSS 9.6No exploitEPSS 1%

    metabase · metabaseMay 18, 2023

  • CVE-2026-59827
    36Monitor

    Metabase: Unsafe Deserialization of H2 Query Results

    HighCVSS 8.8Proof of conceptEPSS 4%

    metabase · metabaseJul 9, 2026

  • CVE-2026-59826
    36Monitor

    Metabase: Arbitrary Code Execution via Database Connection Detail Bypass

    CriticalCVSS 9.1No exploitEPSS 1%

    metabase · metabaseJul 9, 2026

  • CVE-2026-50148
    36Monitor

    Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write

    CriticalCVSS 9.1No exploitEPSS 1%

    metabase · metabaseJul 15, 2026

  • CVE-2022-39361
    35Monitor

    Metabase vulnerable to Remote Code Execution via H2

    HighCVSS 8.8No exploitEPSS 1%

    metabase · metabaseOct 26, 2022

  • CVE-2022-24854
    35Monitor

    Database bypassing any permissions in Metabase via SQlite attach

    HighCVSS 8.8No exploitEPSS 1%

    metabase · metabaseApr 14, 2022

  • CVE-2022-39362
    35Monitor

    Metabase vulnerable to arbitrary SQL execution from queryhash

    HighCVSS 8.8No exploitEPSS 1%

    metabase · metabaseOct 26, 2022

  • CVE-2026-50147
    30Monitor

    Metabase: Arbitrary File Read via MySQL Connection Property Injection

    HighCVSS 7.6No exploitEPSS 0%

    metabase · metabaseJul 15, 2026

  • CVE-2026-33725
    28Monitor

    Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import

    HighCVSS 7.2Proof of conceptEPSS 1%

    metabase · metabaseMar 26, 2026

  • CVE-2022-43776
    26Monitor

    The url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request Forgery attacks.

    MediumCVSS 6.5No exploitEPSS 1%

    metabase · metabaseOct 26, 2022

  • CVE-2022-39359
    26Monitor

    Metabase's GeoJSON validation doesn't prevent redirects to blocked URLs

    MediumCVSS 6.5No exploitEPSS 1%

    metabase · metabaseOct 26, 2022

  • CVE-2022-39360
    26Monitor

    Metabase SSO users able to circumvent IdP login by doing password reset

    MediumCVSS 6.5No exploitEPSS 1%

    metabase · metabaseOct 26, 2022

  • CVE-2022-39358
    26Monitor

    Metabase vulnerable to circumvention of Locked parameter in Signed Embedding

    MediumCVSS 6.5No exploitEPSS 0%

    metabase · metabaseOct 26, 2022

  • CVE-2026-27464
    26Monitor

    Metabase: Server-Side Template Injection via Notifications Endpoint Leads to RCE

    MediumCVSS 6.5No exploitEPSS 0%

    metabase · metabaseFeb 21, 2026

  • CVE-2023-23629
    25Monitor

    Metabase subject to Improper Privilege Management

    MediumCVSS 6.3No exploitEPSS 0%

    metabase · metabaseJan 27, 2023

  • CVE-2018-0697
    24Monitor

    Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via

    MediumCVSS 6.1No exploitEPSS 1%

    metabase · metabaseNov 15, 2018

  • CVE-2022-24853
    22Monitor

    File system exposure in Metabase

    MediumCVSS 5.3Proof of conceptEPSS 3%

    metabase · metabaseApr 14, 2022

  • CVE-2022-24855
    21Monitor

    XSS vulnerability in Metabase

    MediumCVSS 5.4No exploitEPSS 1%

    metabase · metabaseApr 14, 2022

  • CVE-2025-27141
    19Monitor

    Metabase Enterprise Edition allows cached questions to leak data to impersonated users

    MediumCVSS 4.8No exploitEPSS 0%

    metabase · metabaseFeb 24, 2025

  • CVE-2023-23628
    16Monitor

    Metabase subject to Exposure of Sensitive Information to an Unauthorized Actor

    MediumCVSS 4.1No exploitEPSS 0%

    metabase · metabaseJan 27, 2023

  • CVE-2025-5895
    8Monitor

    Metabase dom.js parseDataUri redos

    LowCVSS 2.1No exploitEPSS 1%

    metabase · metabaseJun 9, 2025