Advisories for Maven/Org.open-Metadata/Openmetadata-Service package

2024

OpenMetadata vulnerable to a SpEL Injection in `PUT /api/v1/events/subscriptions` (`GHSL-2023-251`)

This issue may lead to Remote Code Execution.

OpenMetadata vulnerable to a SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` (`GHSL-2023-236`)

This issue may lead to Remote Code Execution by a registered and authenticated user.

OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)

This issue may lead to Remote Code Execution.