Security Advisory

CVE-2026-72899

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-10 17:56:09

Last updated 2026-08-11 03:55:38

Assigner cisa-cg

CVSS score not scored

State PUBLISHED

Description

Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.

← Browse all CVEs View on cve.org ↗