open-metadata kayıtları
open-metadata üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 2 · %16,7
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %58,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-94 Improper Control of Generation of Code ('Code Injection')3
- CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine1
- CWE-269 Improper Privilege Management1
- CWE-287 Improper Authentication1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
61Bu hafta | CVE-2024-28255Silahlaştırılmış | Authentication Bypass in OpenMetadataopen-metadata · openmetadata · CWE-287 | Kritik9,8 | — | %73,3 | 15 Mar 2024 |
49Planlayın | CVE-2024-28254Silahlaştırılmış | SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadataopen-metadata · openmetadata · CWE-78 | Yüksek8,8 | — | %45,7 | 15 Mar 2024 |
39İzleyin | CVE-2024-28253Kavram kanıtı | SpEL Injection in `PUT /api/v1/policies` in OpenMetadataopen-metadata · openmetadata · CWE-94 | Yüksek8,8 | — | %12,5 | 15 Mar 2024 |
37İzleyin | CVE-2024-28848İstismar yok | SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` in OpenMetadataopen-metadata · openmetadata · CWE-94 | Yüksek8,8 | — | %7,9 | 15 Mar 2024 |
36İzleyin | CVE-2024-28847İstismar yok | SpEL Injection in `PUT /api/v1/events/subscriptions` in OpenMetadataopen-metadata · openmetadata · CWE-94 | Yüksek8,8 | — | %2,4 | 15 Mar 2024 |
35İzleyin | CVE-2024-55238İstismar yok | OpenMetadata <=1.4.1 is vulnerable to SQL Injection.open-metadata · openmetadata · CWE-89 | Yüksek8,8 | — | %0,6 | 17 Nis 2025 |
35İzleyin | CVE-2025-50465İstismar yok | OpenMetadata <=1.4.4 is vulnerable to SQL Injection.open-metadata · openmetadata · CWE-89 | Yüksek8,8 | — | %0,3 | 8 Ağu 2025 |
34İzleyin | CVE-2026-22244İstismar yok | OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCEopen-metadata · openmetadata · CWE-1336 | Yüksek8,5 | — | %1,3 | 8 Oca 2026 |
30İzleyin | CVE-2026-26010İstismar yok | Leaky JWTs in OpenMetadata exposing highly-privileged bot usersopen-metadata · openmetadata · CWE-269 | Yüksek7,6 | — | %0,4 | 11 Şub 2026 |
26İzleyin | CVE-2025-50466İstismar yok | OpenMetadata <=1.4.4 is vulnerable to SQL Injection.open-metadata · openmetadata · CWE-89 | Orta6,5 | — | %0,3 | 8 Ağu 2025 |
26İzleyin | CVE-2025-50468İstismar yok | OpenMetadata <=1.4.4 is vulnerable to SQL Injection.open-metadata · openmetadata · CWE-89 | Orta6,5 | — | %0,3 | 8 Ağu 2025 |
26İzleyin | CVE-2025-50467İstismar yok | OpenMetadata <=1.4.4 is vulnerable to SQL Injection.open-metadata · openmetadata · CWE-89 | Orta6,5 | — | %0,3 | 8 Ağu 2025 |
- CVE-2024-2825561Bu hafta
Authentication Bypass in OpenMetadata
KritikCVSS 9,8SilahlaştırılmışEPSS %73open-metadata · openmetadata15 Mar 2024
- CVE-2024-2825449Planlayın
SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata
YüksekCVSS 8,8SilahlaştırılmışEPSS %46open-metadata · openmetadata15 Mar 2024
- CVE-2024-2825339İzleyin
SpEL Injection in `PUT /api/v1/policies` in OpenMetadata
YüksekCVSS 8,8Kavram kanıtıEPSS %13open-metadata · openmetadata15 Mar 2024
- CVE-2024-2884837İzleyin
SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` in OpenMetadata
YüksekCVSS 8,8İstismar yokEPSS %8open-metadata · openmetadata15 Mar 2024
- CVE-2024-2884736İzleyin
SpEL Injection in `PUT /api/v1/events/subscriptions` in OpenMetadata
YüksekCVSS 8,8İstismar yokEPSS %2open-metadata · openmetadata15 Mar 2024
- CVE-2024-5523835İzleyin
OpenMetadata <=1.4.1 is vulnerable to SQL Injection.
YüksekCVSS 8,8İstismar yokEPSS %1open-metadata · openmetadata17 Nis 2025
- CVE-2025-5046535İzleyin
OpenMetadata <=1.4.4 is vulnerable to SQL Injection.
YüksekCVSS 8,8İstismar yokEPSS %0open-metadata · openmetadata8 Ağu 2025
- CVE-2026-2224434İzleyin
OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE
YüksekCVSS 8,5İstismar yokEPSS %1open-metadata · openmetadata8 Oca 2026
- CVE-2026-2601030İzleyin
Leaky JWTs in OpenMetadata exposing highly-privileged bot users
YüksekCVSS 7,6İstismar yokEPSS %0open-metadata · openmetadata11 Şub 2026
- CVE-2025-5046626İzleyin
OpenMetadata <=1.4.4 is vulnerable to SQL Injection.
OrtaCVSS 6,5İstismar yokEPSS %0open-metadata · openmetadata8 Ağu 2025
- CVE-2025-5046826İzleyin
OpenMetadata <=1.4.4 is vulnerable to SQL Injection.
OrtaCVSS 6,5İstismar yokEPSS %0open-metadata · openmetadata8 Ağu 2025
- CVE-2025-5046726İzleyin
OpenMetadata <=1.4.4 is vulnerable to SQL Injection.
OrtaCVSS 6,5İstismar yokEPSS %0open-metadata · openmetadata8 Ağu 2025