Skip to content
OpenAdvisories

Vendor

open-metadata

10 known vulnerabilities.

Products

OpenMetadata 10
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-28254 Public exploit EPSS 46%

    SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata

    OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `‎AlertUtil::validateExpression` method evaluates an SpEL expression using `getVal…

    open-metadata OpenMetadata