[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBuX93Pi30O1FDM58QQTHFWlXHL5Ks_FvOSmr43UN1hY":3,"g5a-risk:CVE-2023-38646":139},{"success":4,"data":5,"meta":136},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":30,"epssPercentile":27,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":38,"references":39,"referencesCount":65,"weaknesses":66,"weaknessesCount":38,"isActivelyExploited":70,"cisaInfo":27,"otxData":27,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":134,"notableEvents":135},"CVE-2023-38646","What is CVE-2023-38646?","Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1, 0.44.7.1, 1.44.7.1, 0.43.7.2, and 1.43.7.2.","Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's pri...","2023-07-21T15:15:10.003","2024-02-15T16:15:45.38",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,0.98677,[30,30,30,30,30,30,30],"Critical",[34],{"vendor":35,"product":35,"version":36,"criteria":37,"vulnerable":4},"metabase","*","cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",1,[40,44,47,52,56,60],{"url":41,"source":42,"tags":43},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F174091\u002FMetabase-Remote-Code-Execution.html","Packetstormsecurity",[],{"url":45,"source":42,"tags":46},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F177138\u002FMetabase-0.46.6-Remote-Code-Execution.html",[],{"url":48,"source":49,"tags":50},"https:\u002F\u002Fgithub.com\u002Fmetabase\u002Fmetabase\u002Fissues\u002F32552","GitHub",[51],"Issue Tracking",{"url":53,"source":49,"tags":54},"https:\u002F\u002Fgithub.com\u002Fmetabase\u002Fmetabase\u002Freleases\u002Ftag\u002Fv0.46.6.1",[55],"Release Notes",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=36812256","Ycombinator",[51],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.metabase.com\u002Fblog\u002Fsecurity-advisory","Metabase",[64],"Vendor Advisory",6,[67],{"id":68,"name":68,"description":69},"Unknown","NVD-CWE-noinfo",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2023-38646? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-38646, a critical severity cyber security vulnerability from 2023. High exploit probability (98.7%). Metabase open source ...","CVE-2023-38646, CVE-2023-38646 vulnerability, CVE-2023-38646 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, metabase security, metabase vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2023-38646",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-38646","Cybersecurity","CVE-2023-38646, CVE-2023-38646 vulnerability, CVE-2023-38646 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":27,"Negate":27,"Nodes":99},[100],{"Operator":101,"Negate":27,"CPEMatch":102},"OR",[103,106,110,114,118,122,126,130],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":104,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":105,"VersionEndIncluding":27},"5AE3BE02-E7B9-43CB-8FBA-001F5D8E24ED","0.43.7.2",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":108,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":109,"VersionEndIncluding":27},"cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*","6591576F-15AC-493F-96B4-6F3E1E5D1350","1.43.7.2",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":111,"VersionStartExcluding":27,"VersionStartIncluding":112,"VersionEndExcluding":113,"VersionEndIncluding":27},"90CEC6C0-C2EE-496D-BBE0-DBC83717F211","0.44.0","0.44.7.1",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":115,"VersionStartExcluding":27,"VersionStartIncluding":116,"VersionEndExcluding":117,"VersionEndIncluding":27},"EC4D0A9A-F084-403A-83BF-F1C56470B845","0.45.0","0.45.4.1",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":119,"VersionStartExcluding":27,"VersionStartIncluding":120,"VersionEndExcluding":121,"VersionEndIncluding":27},"BEA5EEF8-7F70-4D40-9EB6-8BB5226E281E","0.46.0","0.46.6.1",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":123,"VersionStartExcluding":27,"VersionStartIncluding":124,"VersionEndExcluding":125,"VersionEndIncluding":27},"825F5E14-49FC-4A8A-87FE-FA039D121F99","1.44.0","1.44.7.1",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":127,"VersionStartExcluding":27,"VersionStartIncluding":128,"VersionEndExcluding":129,"VersionEndIncluding":27},"C20D76CF-15B4-49C3-8F3A-8417B5C8016B","1.45.0","1.45.4.1",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":27},"47767C52-13CC-4164-84DC-54E3BDC1C590","1.46.0","1.46.6.1",[],[],{"lastModified":11,"cacheTime":137,"version":138},1792326690658,"2.0",{"score":140,"band":32,"action":141,"scoredAt":142},89,"Emergency patch","2026-10-16T06:58:39.715135+00:00"]