Tag: database

Angreifer haben eine kritische SQL-Schwachstelle in Metabase ausgenutzt und auf Kundeninstanzen zugegriffen. Cloud-Instanzen sind gepatcht, selbst gehostete Systeme sollten umgehend aktualisiert werden.

Comments

The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.

The security defect allows unauthenticated, remote attackers to gain administrative access to Metabase instances. The post Metabase Patches Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.

Jetzt patchen! Admin-Attacken auf Metabase beobachtetAlertheise security Quelle: Heise Security Ticker

Comments

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. […]

Comments