| Package | Affected versions | Patched versions |
|---|---|---|
| openmetadata | ≤ 1.4.4 |
OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The supportedDataTypeParam parameter can be used to build a SQL query.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free