News World

Artificial Intelligence
Infographic 2 minutes

Metabase: a stranger becomes administrator

Metabase: a stranger becomes administrator
Metabase: a stranger becomes administrator. Of the three briefs, the one carrying a CERT-FR alert, not a routine advisory. An instance on the web. Its password reset endpoint is publicly reachable.. Exposed. A crafted request. An attacker slips an SQL command into it, without logging in.. SQL injection. The application database. It obeys the command slipped into the request.. Actively exploited. Administrator. The attacker gains administrator rights on the instance.. Critical flaw.

Share on LinkedIn

Download the animated GIF to post it as is on a social network, or the still image (PNG).

From issue 003, section « In brief ».

Infographic

Get the newsletter

Every Tuesday, in four minutes: what shipped in AI and what you can actually try the same day.

Double opt-in by email. One-click unsubscribe, link in plain sight in every issue.

News World AI

Geneva, Switzerland. Write to hello@newsworldai.xyz.