SWSandworm Watch
cve entity

CVE-2021-41277

1 source-linked records in the current knowledge graph.

high

CVE-2021-41277: Metabase GeoJSON API Local File Inclusion Vulnerability

Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2021-41277EPSS 97.2%Metabase
CISA KEV ↗ · unattributed attribution