devtake.dev
AI Security Hardware Open Source Policy Apple

#sql-injection

RSS
Related: #credential-theft · 1 #data-breach · 1 #dev-tools · 1 #open-source · 1 #security · 1 #supply-chain · 1 #zero-day · 1
An open Framework Laptop 13 in DIY configuration on a white desk, mainboard exposed, with two 32GB memory modules and an SSD beside it
Security·

Metabase's password-reset endpoint handed out admin, and Framework had to email every customer

A CVSS 10.0 SQL injection in Metabase was exploited from August 3. Framework told every customer their data was taken. Tally lost emails and password hashes.