CVE-2023-38646 PoC — Metabase 安全漏洞

Source

https://github.com/Xuxfff/CVE-2023-38646-Poc

Associated Vulnerability

Title:Metabase 安全漏洞 (CVE-2023-38646)
Description:Metabase是美国Metabase公司的一个开源数据分析平台。 Metabase 0.46.6.1之前版本和Metabase Enterprise 1.46.6.1之前版本存在安全漏洞，该漏洞源于允许攻击者以运行该服务的权限在服务器上执行任意命令。

Readme

# CVE-2023-38646-Poc

## usage
python check.py ip port

## Vulnerable version

    Metabase Enterprise 1.46 < 1.46.6.1
    Metabase Enterprise 1.45 < 1.45.4.1
    Metabase Enterprise 1.44 < 1.44.7.1
    Metabase Enterprise 1.43 < 1.43.7.2
    Metabase open source 0.46 < 0.46.6.1
    Metabase open source 0.45 < v0.45.4.1
    Metabase open source 0.44 < 0.44.7.1
    Metabase open source 0.43 < 0.43.7.2

File Snapshot


 [4.0K]  /data/pocs/ec3f9ab7f966f6b0b70a9dddaba178f90677980e
├── [1.2K]  check.py
└── [ 404]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!