References https://nvd.nist.gov/vuln/detail/CVE-2021-41277 https://github.com/metabase/metabase/security/advisories/GHSA-w73v-6p7p-fpfr https://www.cnblogs.com/dxp5201/articles/16163572.html https://m.freebuf.com/vuls/306858.html https://bbs.huaweicloud.com/blogs/313371 https://avd.aliyun.com/detail?id=AVD-2021-41277 https://blog.csdn.net/book8/article/details/152641814 https://0x0021h.medium.com/cve-2021-41277-metabase-sensitive-information-disclosure-c795b79bc562 https://www.sentinelone.com/vulnerability-database/cve-2021-41277/ https://github.com/tahtaciburak/CVE-2021-41277
Related VulnerabilitiesPoCCVE-2026-72898: Metabase - Unauthenticated SQL InjectionmetaBase reset_password 接口存在sql注入漏洞PoCMetabase SQL注入致远程代码执行漏洞PoCmetabase-installer-exposure: Metabase Installer - ExposurePoCCVE-2021-41277: Metabase - Local File InclusionPoCCVE-2023-38646: Metabase < 0.46.6.1 - Remote Code ExecutionPoCCVE-2021-41277: Metabase 输入验证错误漏洞PoCCVE-2023-38646: Metabase 远程命令执行漏洞 RCEPoCmetabase-log4j-rce: Metabase - Remote Code Execution (Apache Log4j)Metabase CVE-2023-38646远程代码执行漏洞Metabase validate 远程命令执行漏洞(CVE-2023-38646)Metabase H2 远程代码执行漏洞