Vulnerabilities > Metabase > Metabase > 0.43.4

DATE CVE VULNERABILITY TITLE RISK
2022-10-26 CVE-2022-43776 Server-Side Request Forgery (SSRF) vulnerability in Metabase
The url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request Forgery attacks.
network
low complexity
metabase CWE-918
6.5