Description

Acunetix determined that the Metabase is vulnerable to remote code execution.

Remediation

Upgrade to the latest version of Metabase

References

CVE-2023-38646

Related Vulnerabilities

MediaWiki Improper Input Validation Vulnerability (CVE-2017-0370)

WordPress Plugin Extend WordPress-Various Shortcodes & Widgets TimThumb Arbitrary File Upload (2.1.01)

WordPress Plugin SlideDeck 2 Lite Responsive Content Slider Local/Remote File Inclusion (2.3.3)

WordPress Plugin AWSM Team-Team Showcase Local File Inclusion (1.3.1)

WordPress Plugin Visual Composer:Page Builder for WordPress Local File Inclusion (5.1)

Severity

High

Classification

CVE-2023-38646 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

File Inclusion