Metabase Information Disclosure Vulnerability

Metabase is an open source data analysis platform from Metabase, Inc. An information disclosure vulnerability exists in Metabase, which stems from a lack of permission validation in the product’s admin->settings->maps->custom maps->add a map operation. An attacker could obtain sensitive information through this vulnerability.