Skip to content
OpenAdvisories

Vendor

open-metadata

10 known vulnerabilities.

Products

OpenMetadata 10
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-28255 Public exploit Scanner template EPSS 73%

    Authentication Bypass in OpenMetadata

    OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `JwtFilter` handles the API authentication by requiring and verifying JWT tokens. …

    open-metadata OpenMetadata
  • Critical 9.4
    CVE-2024-28253 Scanner template EPSS 13%

    SpEL Injection in `PUT /api/v1/policies` in OpenMetadata

    OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. `CompiledRule::validateExpression` is also called from `PolicyRepository.prepare`. `pr…

    open-metadata OpenMetadata org.open-metadata:openmetadata-service Maven