Description

OpenMetadata suffers from an authentication bypass due to a JWT filter vulnerability. Attackers can manipulate path parameters to skip JWT validation, leading to unauthorized access to arbitrary endpoints, including those vulnerable to SpEL expression injection.

Remediation

Upgrade to OpenMetadata version 1.2.4 or later.

References

Authentication Bypass (`GHSL-2023-237`)

NVD CVE-2024-28255 Detail

Related Vulnerabilities

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3464)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11022)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1591)

Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)

Moodle CVE-2020-25698 Vulnerability (CVE-2020-25698)

Severity

Critical

Classification

CVE-2024-28255 CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Tags

Authentication Bypass Known Vulnerabilities