deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-33183
Published: 2022-10-25
Description: A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2085; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-33184
Published: 2022-10-25
Description: A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8.2.3c, v8.2.0_cbn5, 7.4.2j could allow local authenticated attackers to exploit stack-based buffer overflows and execute arbitrary code as the root user account.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2080; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-33185
Published: 2022-10-25
Description: Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input. Authenticated local attackers could abuse these vulnerabilities to exploit stack-based buffer overflows, allowing arbitrary code execution as the root user account.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2078; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-41711
Published: 2022-10-25
Description: Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://fluidattacks.com/advisories/harlow/; https://github.com/uasoft-indonesia/badaso/issues/802; https://fluidattacks.com/advisories/harlow/
CVE: CVE-2022-43747
Published: 2022-10-26
Description: baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in security update S-2022-01, which contains fixed bMA setup files for these versions. This also is fixed in baramundi Management Suite 2022 R2.
CVSS Score: 7.5 (HIGH)
References: https://www.baramundi.com/de-de/security-info/s-2022-01/; https://www.baramundi.com/en-us/security-info/s-2022-01/; https://www.baramundi.com/de-de/security-info/s-2022-01/
CVE: CVE-2022-43750
Published: 2022-10-26
Description: drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.15; https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.1; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a659daf63d16aa883be42f3f34ff84235c302198
CVE: CVE-2022-25849
Published: 2022-10-26
Description: The package joyqi/hyper-down from 0.0.0 are vulnerable to Cross-site Scripting (XSS) because the module of parse markdown does not filter the href attribute very well.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://security.snyk.io/vuln/SNYK-PHP-JOYQIHYPERDOWN-2953544; https://security.snyk.io/vuln/SNYK-PHP-JOYQIHYPERDOWN-2953544
CVE: CVE-2022-31256
Published: 2022-10-26
Description: A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.
CVSS Score: 7.7 (HIGH)
CWE: CWE-59
References: https://bugzilla.suse.com/show_bug.cgi?id=1204696; https://bugzilla.suse.com/show_bug.cgi?id=1204696
CVE: CVE-2022-29822
Published: 2022-10-26
Description: Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://csirt.divd.nl/CVE-2022-29822/; https://csirt.divd.nl/DIVD-2022-00020; https://csirt.divd.nl/CVE-2022-29822/
CVE: CVE-2022-29823
Published: 2022-10-26
Description: Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-1321, CWE-1321
References: https://csirt.divd.nl/CVE-2022-29823/; https://csirt.divd.nl/DIVD-2022-00020; https://csirt.divd.nl/CVE-2022-29823/
CVE: CVE-2022-2421
Published: 2022-10-26
Description: Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89
References: https://csirt.divd.nl/CVE-2022-2421; https://csirt.divd.nl/DIVD-2022-00045; https://csirt.divd.nl/CVE-2022-2421
CVE: CVE-2022-2422
Published: 2022-10-26
Description: Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://csirt.divd.nl/CVE-2022-2422; https://csirt.divd.nl/DIVD-2022-00020; https://csirt.divd.nl/CVE-2022-2422
CVE: CVE-2022-43748
Published: 2022-10-26
Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation management in Synology Presto File Server before 2.1.2-1601 allows remote attackers to write arbitrary files via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: https://www.synology.com/security/advisory/Synology_SA_22_19; https://www.synology.com/security/advisory/Synology_SA_22_19
CVE: CVE-2022-43749
Published: 2022-10-26
Description: Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-1601 allows remote authenticated users to bypass security constraint via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: https://www.synology.com/security/advisory/Synology_SA_22_19; https://www.synology.com/security/advisory/Synology_SA_22_19
CVE: CVE-2022-20776
Published: 2022-10-26
Description: Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu
CVE: CVE-2022-20811
Published: 2022-10-26
Description: Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu
CVE: CVE-2022-20822
Published: 2022-10-26
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read and delete files on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains certain character sequences to an affected system. A successful exploit could allow the attacker to read or delete specific files on the device that their configured administrative level should not have access to. Cisco plans to release software updates that address this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-path-trav-Dz5dpzyM; https://yoroi.company/en/research/cve-advisory-full-disclosure-cisco-ise-path-traversal/; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-path-trav-Dz5dpzyM
CVE: CVE-2022-20933
Published: 2022-10-26
Description: A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of client-supplied parameters while establishing an SSL VPN session. An attacker could exploit this vulnerability by crafting a malicious request and sending it to the affected device. A successful exploit could allow the attacker to cause the Cisco AnyConnect VPN server to crash and restart, resulting in the failure of the established SSL VPN connections and forcing remote users to initiate a new VPN connection and re-authenticate. A sustained attack could prevent new SSL VPN connections from being established. Note: When the attack traffic stops, the Cisco AnyConnect VPN server recovers gracefully without requiring manual intervention. Cisco Meraki has released software updates that address this vulnerability.
CVSS Score: 8.6 (HIGH)
CWE: CWE-234
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-meraki-mx-vpn-dos-vnESbgBf; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-meraki-mx-vpn-dos-vnESbgBf
CVE: CVE-2022-20953
Published: 2022-10-26
Description: Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu
CVE: CVE-2022-20954
Published: 2022-10-26
Description: Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu
CVE: CVE-2022-20955
Published: 2022-10-26
Description: Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu
CVE: CVE-2022-20959
Published: 2022-10-26
Description: A vulnerability in the External RESTful Services (ERS) API of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by persuading an authenticated administrator of the web-based management interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-twLnpy3M; https://yoroi.company/en/research/cve-advisory-full-disclosure-cisco-ise-cross-site-scripting/; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-twLnpy3M
CVE: CVE-2022-39357
Published: 2022-10-26
Description: Winter is a free, open-source content management system based on the Laravel PHP framework. The Snowboard framework in versions 1.1.8, 1.1.9, and 1.2.0 is vulnerable to prototype pollution in the main Snowboard class as well as its plugin loader. The 1.0 branch of Winter is not affected, as it does not contain the Snowboard framework. This issue has been patched in v1.1.10 and v1.2.1. As a workaround, one may avoid this issue by following some common security practices for JavaScript, including implementing a content security policy and auditing scripts.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1321, CWE-1321
References: https://github.com/wintercms/winter/commit/2a13faf99972e84c9661258f16c4750fa99d29a1; https://github.com/wintercms/winter/commit/bce4b59584abf961e9400af3d7a4fd7638e26c7f; https://github.com/wintercms/winter/releases/tag/v1.1.10
CVE: CVE-2022-39944
Published: 2022-10-26
Description: In Apache Linkis <=1.2.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code execution impact exists when an attacker has write access to a database and configures a JDBC EC with a MySQL data source and malicious parameters. Therefore, the parameters in the jdbc url should be blacklisted. Versions of Apache Linkis <= 1.2.0 will be affected, We recommend users to update to 1.3.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://lists.apache.org/thread/rxytj48q17304snonjtyt5lnlw64gccc; https://lists.apache.org/thread/rxytj48q17304snonjtyt5lnlw64gccc
CVE: CVE-2022-40238
Published: 2022-10-26
Description: A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://github.com/CERTCC/VINCE/issues?q=label%3Asecurity; https://github.com/CERTCC/VINCE/issues?q=label%3Asecurity
CVE: CVE-2022-42468
Published: 2022-10-26
Description: Apache Flume versions 1.4.0 through 1.10.1 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with an unsafe providerURL. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-74
References: https://issues.apache.org/jira/browse/FLUME-3437; https://lists.apache.org/thread/1ckhmp539zr2nd2rs45pocpywk2d9zvz; https://lists.apache.org/thread/939wkx8o90bp6m2ht3t1sdyo1ncypl78
CVE: CVE-2022-43766
Published: 2022-10-26
Description: Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. Users should upgrade to 0.13.3 which addresses this issue or use a later version of Java to avoid it.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://lists.apache.org/thread/9pgpb82p5brooy41n8l5q0y9h33db2zn; https://lists.apache.org/thread/9pgpb82p5brooy41n8l5q0y9h33db2zn
CVE: CVE-2022-3671
Published: 2022-10-26
Description: A vulnerability classified as critical was found in SourceCodester eLearning System 1.0. This vulnerability affects unknown code of the file /admin/students/manage.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-212014 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/anx0ing/CVE_demo/blob/main/2022/eLearning%20System-SQL%20injections.md; https://vuldb.com/?ctiid.212014; https://vuldb.com/?id.212014
CVE: CVE-2022-3672
Published: 2022-10-26
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Sanitization Management System 1.0. This issue affects some unknown processing of the file /php-sms/classes/SystemSettings.php. The manipulation of the argument name/shortname leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-212015.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://vuldb.com/?id.212015; https://vuldb.com/?id.212015
CVE: CVE-2022-3673
Published: 2022-10-26
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the file /php-sms/classes/Master.php. The manipulation of the argument message leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-212016.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://vuldb.com/?id.212016; https://vuldb.com/?id.212016
CVE: CVE-2022-3674
Published: 2022-10-26
Description: A vulnerability has been found in SourceCodester Sanitization Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing authentication. The attack can be launched remotely. The identifier VDB-212017 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-306
References: https://vuldb.com/?id.212017; https://vuldb.com/?id.212017
CVE: CVE-2022-37202
Published: 2022-10-26
Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/AgainstTheLight/CVE-2022-37202/blob/main/README.md; https://github.com/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql1.md; https://github.com/AgainstTheLight/CVE-2022-37202/blob/main/README.md
CVE: CVE-2022-43774
Published: 2022-10-26
Description: The HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.tenable.com/security/research/tra-2022-33; https://www.tenable.com/security/research/tra-2022-33
CVE: CVE-2022-43775
Published: 2022-10-26
Description: The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.tenable.com/security/research/tra-2022-33; https://www.tenable.com/security/research/tra-2022-33
CVE: CVE-2022-43776
Published: 2022-10-26
Description: The url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request Forgery attacks. Previously implemented blacklists could be circumvented by leveraging 301 and 302 redirects.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.tenable.com/security/research/tra-2022-34; https://www.tenable.com/security/research/tra-2022-34
CVE: CVE-2022-39358
Published: 2022-10-26
Description: Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, and 1.42.6, it was possible to circumvent locked parameters when requesting data for a question in an embedded dashboard by constructing a malicious request to the backend. This issue is patched in versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, and 1.42.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-667
References: https://github.com/metabase/metabase/security/advisories/GHSA-8qgm-9mj6-36h3; https://github.com/metabase/metabase/security/advisories/GHSA-8qgm-9mj6-36h3
CVE: CVE-2022-39359
Published: 2022-10-26
Description: Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9, custom GeoJSON map URL address would follow redirects to addresses that were otherwise disallowed, like link-local or private-network. This issue is patched in versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9. Metabase no longer follow redirects on GeoJSON map URLs. An environment variable `MB_CUSTOM_GEOJSON_ENABLED` was also added to disable custom GeoJSON completely (`true` by default).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-601
References: https://github.com/metabase/metabase/commit/057e2d67fcbeb6b48db68b697e022243e3a5771e; https://github.com/metabase/metabase/security/advisories/GHSA-w5j7-4mgm-77f4; https://github.com/metabase/metabase/commit/057e2d67fcbeb6b48db68b697e022243e3a5771e
CVE: CVE-2022-39360
Published: 2022-10-26
Description: Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9 single sign on (SSO) users were able to do password resets on Metabase, which could allow a user access without going through the SSO IdP. This issue is patched in versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9. Metabase now blocks password reset for all users who use SSO for their Metabase login.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-304, CWE-287
References: https://github.com/metabase/metabase/commit/edadf7303c3b068609f57ca073e67885d5c98730; https://github.com/metabase/metabase/security/advisories/GHSA-gw4g-ww2m-v7vc; https://github.com/metabase/metabase/commit/edadf7303c3b068609f57ca073e67885d5c98730
CVE: CVE-2022-39361
Published: 2022-10-26
Description: Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9, H2 (Sample Database) could allow Remote Code Execution (RCE), which can be abused by users able to write SQL queries on H2 databases. This issue is patched in versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9. Metabase no longer allows DDL statements in H2 native queries.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-441
References: https://github.com/metabase/metabase/security/advisories/GHSA-gqpj-wcr3-p88v; https://github.com/metabase/metabase/security/advisories/GHSA-gqpj-wcr3-p88v
CVE: CVE-2022-39362
Published: 2022-10-26
Description: Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9, unsaved SQL queries are auto-executed, which could pose a possible attack vector. This issue is patched in versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9. Metabase no longer automatically executes ad-hoc native queries. Now the native editor shows the query and gives the user the option to manually run the query if they want.
CVSS Score: 8.8 (HIGH)
CWE: CWE-356
References: https://github.com/metabase/metabase/commit/b7c6bb905a9187347cfc9035443b514713027a5c; https://github.com/metabase/metabase/security/advisories/GHSA-93wj-fgjg-r238; https://github.com/metabase/metabase/commit/b7c6bb905a9187347cfc9035443b514713027a5c