All vulnerabilities

Servers and applications

GHSA-frx5-q4fp-vr4j

Custom Maps Feature lets Admin Users Read Server Files

Severity
High
Published
25 Jan 2021
Last changed
25 Jan 2021
Added to UpHeron
3 Nov 2026
Fixed in
0.37.7
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
MetabaseServers and applications · github:metabase/metabase
  • Every version before 0.37.7

References