Detections
Analytics

SCA: security update for org.open-metadata:openmetadata-service (GHSA-8p5r-6mvv-2435)

high Tenable Cloud Security Plugin ID 412778

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - OpenMetadata is a unified platform for discovery, observability, and governance powered by a central
 metadata repository, in-depth lineage, and seamless team collaboration. Similarly to the GHSL-2023-250
 issue, `AlertUtil::validateExpression` is also called from `EventSubscriptionRepository.prepare()`, which
 can lead to Remote Code Execution. `prepare()` is called from `EntityRepository.prepareInternal()` which,
 in turn, gets called from `EntityResource.createOrUpdate()`. Note that, even though there is an
 authorization check (`authorizer.authorize()`), it gets called after `prepareInternal()` gets called and,
 therefore, after the SpEL expression has been evaluated. In order to reach this method, an attacker can
 send a PUT request to `/api/v1/events/subscriptions` which gets handled by
 `EventSubscriptionResource.createOrUpdateEventSubscription()`. This vulnerability was discovered with the
 help of CodeQL's Expression language injection (Spring) query. This issue may lead to Remote Code
 Execution and has been addressed in version 1.2.4. Users are advised to upgrade. There are no known
 workarounds for this vulnerability. This issue is also tracked as `GHSL-2023-251`. (CVE-2024-28847)

See Also

https://github.com/advisories/GHSA-8p5r-6mvv-2435

Plugin Details

Severity: High

ID: 412778

Version: Revision 1.7

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.58

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2024-28847

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 4/24/2024

Vulnerability Publication Date: 3/15/2024

Reference Information

CVE: CVE-2024-28847

cwe: CWE-94