Metabase SQLi zero-day exploited in customer data-theft attacks

Synthèse

The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.