Q: Is CVE-2022-43776 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Q: What products does CVE-2022-43776 affect?

Tracked products affected include Metabase. Check the version you run to see whether it is affected.

Q: How do I fix CVE-2022-43776?

Apply the vendor fix in your normal patch cycle. Upgrade affected products to a fixed version.

Question 1

What is CVE-2022-43776?

Accepted Answer

CVE-2022-43776 is a medium-severity software vulnerability (Server-side request forgery (SSRF)) with a CVSS score of 6.5. The url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request Forgery attacks. Previously implemented blacklists could be circumvented by leveraging 301 and 302 redirects.

Question 2

Is CVE-2022-43776 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Question 3

What products does CVE-2022-43776 affect?

Accepted Answer

Tracked products affected include Metabase. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2022-43776?

Accepted Answer

Apply the vendor fix in your normal patch cycle. Upgrade affected products to a fixed version.

CVE-2022-43776

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information