Security Advisory

CVE-2025-50465

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-08 00:00:00
Last updated 2025-08-08 19:04:06
Assigner mitre
State PUBLISHED

Description

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The testPlatform parameter can be used to build a SQL query.