Skip to content
Security update available for Metabase - Please upgrade now
metabase.com | blog | #cloud | #zero-day | #sql-injection | #metabase | #self-hosted | #security-advisory | #upgrade
Summary
Metabase patched a 0-day in versions 1.58+ exploited against its Cloud: the reset_password endpoint allowed SQL injection, admin takeover and credential theft — self-hosted users must upgrade.
- Published
- Collected