Openmetadata vulnerabilities

Products

• Openmetadata 5

Newest

• open-metadata openmetadata SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` in OpenMetadata CVE-2024-28848 Fix available 8.8 HighMarch 15, 2024
• open-metadata openmetadata Authentication Bypass in OpenMetadata CVE-2024-28255 Public exploit EPSS 73.3% 9.8 CriticalMarch 15, 2024
• open-metadata openmetadata SpEL Injection in `PUT /api/v1/events/subscriptions` in OpenMetadata CVE-2024-28847 Fix available 8.8 HighMarch 15, 2024
• open-metadata openmetadata SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata CVE-2024-28254 Public exploit EPSS 45.7% 8.8 HighMarch 15, 2024
• open-metadata openmetadata SpEL Injection in `PUT /api/v1/policies` in OpenMetadata CVE-2024-28253 Fix available EPSS 12.5% 9.4 CriticalMarch 15, 2024