Description
OpenMetadata中存在认证绕过漏洞，此漏洞是由于JwtFilter未充分验证用户身份所导致的。
OpenMetadata CVE-2024-28255 认证绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2024-28255
https://open-metadata.org/cve-list
https://www.vicarius.io/vsociety/posts/authentication-bypass-with-path-parameter-in-openmetadata-cve-2024-28255
https://www.acunetix.com/vulnerabilities/web/openmetadata-authentication-bypass-cve-2024-28255/
https://www.sentinelone.com/vulnerability-database/cve-2024-28255/
https://ethicalhacking.uk/unmasking-cve-2024-28255-authentication-bypass-in-openmetadata/
https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2024-0256.html/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28255.yaml
https://www.venustech.com.cn/new_type/aqtg/20240416/27318.html
https://avd.aliyun.com/detail?id=AVD-2024-28255