Security Advisory
CVE-2025-50465
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The testPlatform parameter can be used to build a SQL query.