- Description
- Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1, 0.44.7.1, 1.44.7.1, 0.43.7.2, and 1.43.7.2.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- Hype score
- Not currently trending
🚨 CVE-2023-38646 -> Privilege Escalation A potential ticking time bomb in your network! CVE-2023-38646 is a vulnerability that allows attackers to escalate their privileges from an ordinary user to an administrator on vulnerable systems. 🔥 How it Works: - **Exploit Tar
@Code2Shell
6 Apr 2026
35 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2023-38646 -> Remote Code Execution A critical vulnerability in Apache HTTP Server allows attackers to execute arbitrary code remotely. This flaw could lead to full system compromise and is already being actively exploited. **How it works:** - **Exploitation via htt
@Code2Shell
5 Apr 2026
41 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
"matchCriteriaId": "5AE3BE02-E7B9-43CB-8FBA-001F5D8E24ED",
"versionEndExcluding": "0.43.7.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "6591576F-15AC-493F-96B4-6F3E1E5D1350",
"versionEndExcluding": "1.43.7.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
"matchCriteriaId": "90CEC6C0-C2EE-496D-BBE0-DBC83717F211",
"versionEndExcluding": "0.44.7.1",
"versionStartIncluding": "0.44.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
"matchCriteriaId": "EC4D0A9A-F084-403A-83BF-F1C56470B845",
"versionEndExcluding": "0.45.4.1",
"versionStartIncluding": "0.45.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
"matchCriteriaId": "BEA5EEF8-7F70-4D40-9EB6-8BB5226E281E",
"versionEndExcluding": "0.46.6.1",
"versionStartIncluding": "0.46.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "825F5E14-49FC-4A8A-87FE-FA039D121F99",
"versionEndExcluding": "1.44.7.1",
"versionStartIncluding": "1.44.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "C20D76CF-15B4-49C3-8F3A-8417B5C8016B",
"versionEndExcluding": "1.45.4.1",
"versionStartIncluding": "1.45.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "47767C52-13CC-4164-84DC-54E3BDC1C590",
"versionEndExcluding": "1.46.6.1",
"versionStartIncluding": "1.46.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]