coldbraid

CVE-2021-41277 Metabase Metabase

Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data.

CVSS
not scored

CWE-200

On CISA’s exploited list

Metabase GeoJSON API Local File Inclusion Vulnerability

Added
2024-11-12
Federal patch deadline
2024-12-03
Ransomware use
not known