Skip to content
OpenAdvisories

Archive

17 November 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2021-41277 Exploited Public exploit EPSS 97%

    GeoJSON URL validation can expose server files and environment variables to unauthorized users

    Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (including environment varia…

    KEV Nov 12, 2024