Firetruck

CVE-2021-41277

KEV
Updated Oct 7, 2026 · PUBLISHED
View KEV entry →

Description

Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
metabasemetabase / metabase< 0.40.5affected
metabasemetabase / metabase>= 1.0.0, < 1.40.5affected