{"cvss":10.0,"datePublished":"2024-11-12","dateUpdated":"2024-11-12","description":"Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data.","dueDate":"2024-12-03","id":"CVE-2021-41277","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://github.com/metabase/metabase/security/advisories/GHSA-w73v-6p7p-fpfr ; https://nvd.nist.gov/vuln/detail/CVE-2021-41277","product":"Metabase","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Metabase GeoJSON API Local File Inclusion Vulnerability","vendor":"Metabase"}