Listen to this Post
How the CVE Works
CVE-2025-50465 affects OpenMetadata versions <=1.4.4, where the `listCount` function in `TestDefinitionDAO` is vulnerable to SQL injection. The `testPlatform` parameter is improperly sanitized, allowing attackers to manipulate SQL queries. By injecting malicious SQL payloads, an attacker can extract sensitive database information, bypass authentication, or execute arbitrary commands. The flaw arises due to insufficient input validation when constructing dynamic SQL queries, enabling exploitation via crafted API requests.
DailyCVE Form
Platform: OpenMetadata
Version: <=1.4.4
Vulnerability: SQL Injection
Severity: Critical
Date: 08/11/2025
Prediction: Patch expected by 09/15/2025
What Undercode Say
-- Example Exploit Query SELECT FROM test_definitions WHERE test_platform = 'valid' UNION SELECT username, password FROM users--';
Curl PoC curl -X GET "http://target/api/v1/testDefinitions?testPlatform=valid' UNION SELECT 1,table_name FROM information_schema.tables--"
How Exploit
- Craft malicious `testPlatform` parameter in API requests.
- Use UNION-based SQLi to extract data.
- Chain with other vulnerabilities for RCE.
Protection from this CVE
- Upgrade to patched version.
- Implement parameterized queries.
- Apply WAF rules for SQLi patterns.
Impact
- Unauthorized data access.
- Database compromise.
- Potential system takeover.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
