Description
Acunetix determined that the Metabase is vulnerable to remote code execution.
Remediation
Upgrade to the latest version of Metabase
References
Related Vulnerabilities
WordPress Plugin Dean's FCKEditor with pwwang's code Arbitrary File Upload (1.0.0)
WordPress Plugin TablePress CSV Injection (1.9.2)
Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-3221)
Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-1854)
WordPress Improper Input Validation Vulnerability (CVE-2013-5738)