Tell HN: Upgrade your Metabase installation

Post by riadsila » Fri, Jul 21, 2023, 11:39 AM UTC

Post by thomasfromcdnjs » Fri, Jul 21, 2023, 11:54 AM UTC

Post by vxNsr » Fri, Jul 21, 2023, 12:23 PM UTC

riadsila wrote: post #2

For more context: https://www.metabase.com/blog/security-advisory

Post by MuffinFlavored » Fri, Jul 21, 2023, 12:43 PM UTC

vxNsr wrote: post #6

riadsila wrote: post #2

For more context: https://www.metabase.com/blog/security-advisory

They say they’ll be releasing the patch publicly, but isn’t this OSS, can’t anyone just do a diff and with a little “elbow grease” find the patch?

Post by tedeh » Fri, Jul 21, 2023, 12:52 PM UTC

kevincox wrote: post #3

This is why I try to put everything behind NGINX with basic auth. Unfortunately not everything works well that way but in this case I suspect that this is made unexploitable by anyone without the password.