Detections
Analytics
SCA: security update for org.open-metadata:openmetadata-service (GHSA-5xv3-fm7g-865r)
high Tenable Self-Hosted Container Security Plugin ID 411093
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- OpenMetadata is a unified platform for discovery, observability, and governance powered by a central
metadata repository, in-depth lineage, and seamless team collaboration. The
`CompiledRule::validateExpression` method evaluates an SpEL expression using an
`StandardEvaluationContext`, allowing the expression to reach and interact with Java classes such as
`java.lang.Runtime`, leading to Remote Code Execution. The
`/api/v1/policies/validation/condition/<expression>` endpoint passes user-controlled data
`CompiledRule::validateExpession` allowing authenticated (non-admin) users to execute arbitrary system
commands on the underlaying operating system. In addition, there is a missing authorization check since
`Authorizer.authorize()` is never called in the affected path and therefore any authenticated non-admin
user is able to trigger this endpoint and evaluate arbitrary SpEL expressions leading to arbitrary command
execution. This vulnerability was discovered with the help of CodeQL's Expression language injection
(Spring) query and is also tracked as `GHSL-2023-236`. This issue may lead to Remote Code Execution and
has been resolved in version 1.2.4. Users are advised to upgrade. There are no known workarounds for this
vulnerability. (CVE-2024-28848)
See Also
Plugin Details
Severity: High
ID: 411093
Version: Revision 1.7
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 6.9
Percentile: 97.06
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: High
Base Score: 9
Temporal Score: 6.7
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2024-28848
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 4/24/2024
Vulnerability Publication Date: 3/15/2024
Reference Information
CVE: CVE-2024-28848
cwe: CWE-94