CVE-2022-43776 | Metabase up to 44.4 URL Parameter /api/geojson url server-side request forgery (EUVD-2022-46746)

A vulnerability identified as critical has been detected in Metabase up to 44.4. Affected by this vulnerability is an unknown functionality of the file /api/geojson of the component URL Parameter Handler. The manipulation of the argument url leads to server-side request forgery. This vulnerability is listed as CVE-2022-43776. The attack must be... Weiterlesen