← Database

CVE-2024-55238

HIGH CVSS: 7.1 Published: 2025-04-17 Modified: 2026-06-17

Description

OpenMetadata <=1.4.1 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the WorkflowDAO interface. The workflowtype and status parameters can be used to build a SQL query.

Affected Platforms

Open-Metadata Openmetadata

Weakness Type

CWE-89

References