Skip to content
Threat Feed
Subscribe

Product

OpenMetadata (< 2.0.0)

1 brief RSS
high advisory

Authentication Token Theft via OpenMetadata Redirect Vulnerability

OpenMetadata versions prior to 2.0.0 contain a critical vulnerability in the SAML, OIDC, and OAuth2 handlers that allows attackers to redirect sensitive authentication tokens to external, attacker-controlled domains.

OpenMetadata
2t 1c