Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius
Summary
A critical, maximum-severity vulnerability has been discovered in the Metabase SQL business analytics platform. The zero-day flaw, which currently lacks a CVE, enables remote attackers with administrative privileges to gain unauthorized access to the platform and its connected downstream users.
IFF Assessment
This zero-day vulnerability allows for remote administrative access, posing a significant threat to organizations using the Metabase platform.
Severity
The vulnerability allows for remote, unauthenticated administrative access to a critical business analytics platform, granting extensive control and potential for data exfiltration or system compromise, thus warranting a critical CVSS score.
Defender Context
Organizations utilizing Metabase should be aware of this critical zero-day vulnerability that grants administrative access. Defenders need to monitor for any indicators of compromise related to Metabase and prioritize patching or implementing mitigating controls as soon as they become available.