Executive brief
OpenMetadata vulnerable to a SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` (`GHSL-2023-236`)
Affected products
- Maven org.open-metadata:openmetadata-service
Junglewise Threat Intelligence
CVE-2024-28848: OpenMetadata vulnerable to a SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` (`GHSL-2023-236`)
CVE-2024-28848 · Severity: low · CVSS 3.1 · Published 2024-04-24
Technologies: org.open-metadata:openmetadata-service (Maven). Vendors: Maven.