Executive brief
OpenMetadata vulnerable to a SpEL Injection in `PUT /api/v1/events/subscriptions` (`GHSL-2023-251`)
Affected products
- Maven org.open-metadata:openmetadata-service
Junglewise Threat Intelligence
CVE-2024-28847: OpenMetadata vulnerable to a SpEL Injection in `PUT /api/v1/events/subscriptions` (`GHSL-2023-251`)
CVE-2024-28847 · Severity: low · CVSS 3.1 · Published 2024-04-24
Technologies: org.open-metadata:openmetadata-service (Maven). Vendors: Maven.