漏洞标题
数据库受到不合法 actors 泄露敏感信息的侵犯
漏洞描述信息
Metabase曝露出敏感信息给未经授权的演员
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
漏洞类别
N/A
漏洞标题
Metabase subject to Exposure of Sensitive Information to an Unauthorized Actor
漏洞描述信息
Metabase is an open source data analytics platform. Affected versions are subject to Exposure of Sensitive Information to an Unauthorized Actor. Sandboxed users shouldn't be able to view data about other Metabase users anywhere in the Metabase application. However, when a sandbox user views the settings for a dashboard subscription, and another user has added users to that subscription, the sandboxed user is able to view the list of recipients for that subscription. This issue is patched in versions 0.43.7.1, 1.43.7.1, 0.44.6.1, 1.44.6.1, 0.45.2.1, and 1.45.2.1. There are no workarounds.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
漏洞类别
信息暴露
漏洞标题
Metabase 信息泄露漏洞
漏洞描述信息
Metabase是美国Metabase公司的一个开源数据分析平台。 Metabase存在信息泄露漏洞，该漏洞源于将敏感信息暴露给未经授权的用户。
CVSS信息
N/A
漏洞类别
信息泄露