The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.
Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius
Résumé + lien vers la source. Sans paywall, sans tracking.