Vulnerability in Metabase
CVSS Skor
9.8
EPSS İhtimal
%98.7
Risk Skoru
9.7
Yayın
3 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Nuclei: Metabase < 0.46.6.1 - Remote Code Execution
acesoyeo/METABASE-RCE-CVE-2023-38646-
This script is designed to exploit vulnerable Metabase software versions by providing you as attacker a shell.
CVE-2023-38646是Metabase中的一个远程代码执行漏洞。该漏洞源于Metabase在处理未经身份验证的API端点/api/setup/validate时，对JDBC连接字符串的处理存在安全缺陷。攻击者可以通过构造特定的JDBC连接字符串，利用该端点在服务器上执行任意命令，而无需进行身份验证。
Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only.
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1, 0.44.7.1, 1.44.7.1, 0.43.7.2, and 1.43.7.2.
Repo contains the PoC and steps to reproduce cve 2023-38646
Exploit for the Remote Code Execution (RCE) vulnerability identified in Metabase versions before 0.46.6.1 (open source) and 1.46.6.1 (Enterprise). Authentication is not required for exploitation.
İlgili Benzer Açıklar
GeoJSON URL validation can expose server files and environment variables to unauthorized users
Metabase SQL injection via password reset endpoint
Deserialization of untrusted data in Metabase
Code injection in Metabase
Metabase SQL injection via public card or dashboard
Vulnerability in Metabase
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-38646"