Listen to this Post
How the CVE Works
CVE-2025-50467 is a SQL injection vulnerability in OpenMetadata versions <=1.4.4. The flaw exists in the `listCount` function within the `TestDefinitionDAO` interface. An attacker can manipulate the `supportedDataTypeParam` parameter to inject malicious SQL queries, allowing unauthorized database access. This can lead to data exfiltration, manipulation, or complete database compromise. The vulnerability arises due to improper input sanitization, enabling attackers to bypass security checks and execute arbitrary SQL commands.
DailyCVE Form
Platform: OpenMetadata
Version: <=1.4.4
Vulnerability: SQL Injection
Severity: Critical
Date: 08/11/2025
Prediction: Expected Patch by 09/15/2025
What Undercode Say
SELECT FROM TestDefinition WHERE supportedDataType = 'malicious_payload';
payload = "' OR 1=1; --"
response = requests.get(f"http://target/api/testDefinitions?supportedDataType={payload}")
How Exploit
- Craft malicious SQL via
supportedDataTypeParam. - Bypass authentication.
- Extract sensitive data.
Protection from this CVE
- Update to patched version.
- Use parameterized queries.
- Input validation.
Impact
- Data theft.
- Unauthorized access.
- System compromise.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
