← CVE Intelligence

CVE-2022-43776

n/a / Metabase PUBLISHED

Description (CNA)

The url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request Forgery attacks. Previously implemented blacklists could be circumvented by leveraging 301 and 302 redirects.

Affected (CNA)

Vendor / productVersions
n/a / Metabaseaffected <44.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.