VulnerabilityBleeping Computer
9.0 — CRITICAL
Metabase SQLi zero-day exploited in customer data-theft attacks
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A zero-day SQL injection vulnerability in Metabase versions 1.58 and above was exploited in customer data-theft attacks, impacting Framework and Tally, with LexisNexis also affected by a related attack on its third-party vendor.
⚙️Technical Details
Affected Systems
Metabase Cloud SaaS platformself-hosted Metabase installations
Attack Vectors
/api/session/reset_password/api/user/current
💥Impact Assessment
Severity: Critical
Who Is at Risk
Framework customersTally usersLexisNexis customersSeverity: Critical
🛡️Recommended Actions
1Immediately upgrade to patched versions of Metabase (0.58.24, 0.59.21, 0.60.17, 0.61.11, 0.62.9, and 0.63.5)
2Temporarily block access to /api/session/reset_password until the update can be applied
3Revoke all active user sessions, review API keys and administrator accounts for unauthorized changes
📦Affected Products
MetabaseFrameworkTally
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.