Skip to content
OpenAdvisories

Vendor

open-metadata

10 known vulnerabilities.

Products

OpenMetadata 10
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-28255 Public exploit EPSS 73%

    Authentication Bypass in OpenMetadata

    OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `JwtFilter` handles the API authentication by requiring and verifying JWT tokens. …

    open-metadata OpenMetadata
  • High 8.8
    CVE-2024-28254 Public exploit EPSS 46%

    SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata

    OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `‎AlertUtil::validateExpression` method evaluates an SpEL expression using `getVal…

    open-metadata OpenMetadata