Metabase Cloud

Reported Context (3)

The issue affected Metabase Cloud and self-hosted versions, with Framework confirming customer data exposure, while Metabase urged immediate patching and log review. Metabase Zero-Day Exploited to Give Attackers Unauthenticated Admin Access
Available in both Open Source (OSS) and Enterprise (EE) editions, as well as the fully managed Metabase Cloud service, the platform allows users to build interactive dashboards, generate reports, and perform ad hoc Metabase Zero-Day SQL Injection Enables Unauthenticated Admin Access
giving attackers administrator access to customer instances and enabling data theft from both Metabase Cloud and self-hosted deployments. Metabase Zero-Day SQL Injection Used in Customer Data-Theft Attacks

People (1)

MITRE ATT&CK (4)

Vendors (1)

Products (1)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.