PT-2025-17195 · Unknown · Openmetadata

Published 2025-04-17 · Updated 2025-04-22 · CVE-2024-55238

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenMetadata versions 1.4.1 and earlier

Description The issue allows an attacker to extract information from the database. This is achieved through the listCount function in the WorkflowDAO interface, where the workflowtype and status parameters can be manipulated to build a SQL query.

Recommendations For OpenMetadata versions 1.4.1 and earlier, as a temporary workaround, consider restricting the use of the workflowtype and status parameters in the listCount function of the WorkflowDAO interface until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-55238

GHSA-X8PM-WRG2-MQMX

Affected Products

Openmetadata

References · 11

• 🔥 https://gist.github.com/javadk/68c597cdb94768dab31a3219c2ad9904 · Exploit
• https://osv.dev/vulnerability/CVE-2024-55238 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x8pm-wrg2-mqmx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-55238 · Security Note
• https://github.com/open-metadata/OpenMetadata · Note
• https://github.com/open-metadata/OpenMetadata/blob/98945cb2db87ebb325d3a72131f049abffcba345/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L4243 · Note
• https://github.com/open-metadata/OpenMetadata/blob/98945cb2db87ebb325d3a72131f049abffcba345/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L4247 · Note
• https://github.com/open-metadata/OpenMetadata/commit/47a13e27cf24465c44044ac79654b87dde8d39a8 · Note
• https://twitter.com/cracbot/status/1914635376796348865 · Twitter Post
• https://twitter.com/cybercronai/status/1913374652606316678 · Twitter Post
• https://twitter.com/CVEnew/status/1913455511132873068 · Twitter Post