← العودة للجدول
CVE-2023-37470
CVE-2023-37470 — Metabase is an open-source business intelligence and analytics platform. Prior t
📅 2023-08-04
🔴 Critical 🔥 No NVD ICS/OT Intel CVSS 10 🎯 EPSS 3.15%

📋 الوصف الكامل

Metabase is an open-source business intelligence and analytics platform. Prior to versions 0.43.7.3, 0.44.7.3, 0.45.4.3, 0.46.6.4, 1.43.7.3, 1.44.7.3, 1.45.4.3, and 1.46.6.4, a vulnerability could potentially allow remote code execution on one's Metabase server. The core issue is that one of the supported data warehouses (an embedded in-memory database H2), exposes a number of ways for a conn

💻 الأنظمة المتأثرة

Intel Processor

⚠️ نوع التهديد

ICS/OT

🔗 CVE ID

CVE-2023-37470

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v0.43.7

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←