Dashboard / CVE-2021-41277

CVE-2021-41277

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data.

CISA Known Exploited Vulnerability

Vendor / Product Metabase — Metabase
Date Added 2024-11-12
Remediation Due 2024-12-03
https://github.com/metabase/metabase/security/advisories/GHSA-w73v-6p7p-fpfr ; https://nvd.nist.gov/vuln/detail/CVE-2021-41277

Weakness Classification (2)

Affected Software (10)

VendorProductVersion
metabase metabase 0.40.0
metabase metabase 0.40.1
metabase metabase 0.40.2
metabase metabase 0.40.3
metabase metabase 0.40.4
metabase metabase 1.40.0
metabase metabase 1.40.1
metabase metabase 1.40.2
metabase metabase 1.40.3
metabase metabase 1.40.4

References & Advisories (3)

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links