A single unauthenticated HTTP request to Metabase's password-reset endpoint was all it took for an attacker to gain full administrator access to an analytics platform trusted by tens of thousands of ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results