Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the ‘/reset_password’ database endpoint and gain administrator access to the connected Metabase instance.
2026年9月4日
CVE-2026-72898 [CRITICAL] [在野] – Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the ‘/reset
📑 文章目录
