| Package | Affected versions | Patched versions |
|---|---|---|
| org.open-metadata:openmetadata-service | ≤ 1.4.1 | |
| openmetadata | ≤ 1.4.1 |
OpenMetadata <=1.4.1 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the WorkflowDAO interface. The workflowtype and status parameters can be used to build a SQL query.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free