OpenMetadata Security Vulnerabilities

This page lists all security vulnerabilities fixed in released versions of OpenMetadata.

CVE-2024-28255 Authentication Bypass

This CVE identifies a vulnerability in JWTFilter which could be used to bypass authentication checks for few API endpoints.

CVE-2024-28848 SpEL Injection in GET /api/v1/policies/validation/condition/<expr>

This CVE identified a flaw where it allows the registered users and authenticated users to exploit the API endpoint /api/v1/policies/validation/condition to remotely execute code on the server.

CVE-2024-28847 SpEL Injection in PUT /api/v1/events/subscriptions

This CVE identified a flaw where it allows the registered users and authenticated users to exploit the API endpoint /api/v1/events/subscriptions to remotely execute code on the server.

CVE-2024-28254 SpEL Injection in GET /api/v1/events/subscriptions/validation/condition/<expr>

This CVE identified a flaw where it allows the registered users and authenticated users to exploit the API endpoint GET /api/v1/events/subscriptions/validation/condition/<expr>to remotely execute code on the server.

CVE-2024-28253 SpEL Injection in `PUT /api/v1/policies`

A possible security vulnerability has been identified in OpenMetadata SPeL rule evalaution. This requires access OpenMetadata APIs as an authenticated user. A authenticated user can send PUT request with a malicious payload to execute a JVM method and run a code on the server.