Servers and applications
CVE-2025-30371
It's possible to circumvent local link access protection in GeoJson endpoint
- Severity
- Low 2.1
- Published
- 28 Mar 2025
- Last changed
- 13 Jan 2026
- Added to UpHeron
- 3 Nov 2026
- Fixed in
- 52.16.4
- Also known as
- GHSA-8xf9-9jc8-qp98
- Sources
- Project advisories (GitHub)
Affected software
| Software | Affected versions |
|---|---|
MetabaseServers and applications · github:metabase/metabase |
|
References
- CVE.org https://www.cve.org/CVERecord?id=CVE-2025-30371
- GitHub Advisory Database https://github.com/advisories/GHSA-8xf9-9jc8-qp98
- github.com https://github.com/metabase/metabase/security/advisories/GHSA-8xf9-9jc8-qp98