VYPR
← All advisories
Medium severityOSV Advisory· Published Dec 16, 2024· Updated Jun 17, 2026

CVE-2024-55951

CVE-2024-55951

Description

Metabase is an open-source data analytics platform. For new sandboxing configurations created in 1.52.0 till 1.52.2.4, sandboxed users are able to see field filter values from other sandboxed users. This is fixed in 1.52.2.5. Users on 1.52.0 or 1.52.1 or 1.5.2 should upgrade to 1.52.2.5. There are no workarounds for this issue aside from upgrading.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Metabase/MetabaseOSV2 versions
    0.10.3, 0.34.0-rc1, blah, …+ 1 more
    • (no CPE)range: 0.10.3, 0.34.0-rc1, blah, …
    • (no CPE)range: 1.52.0 to 1.52.2.4

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.