Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-55238
7.1
HIGHCVSS v3
Published
April 17, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
OpenMetadata <=1.4.1 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the WorkflowDAO interface. The workflowtype and status parameters can be used to build a SQL query.
open-metadata/OpenMetadata
GitHubThe Open Context Layer for Data and AI , OpenMetadata is the open platform for building trusted data context and business semantics for humans, AI assistants, and agents.
GitHubThe Open Context Layer for Data and AI , OpenMetadata is the open platform for building trusted data context and business semantics for humans, AI assistants, and agents.<= 1.4.1NVD