CVE-2018-0697

https://notcve.org/view.php?id=CVE-2018-0697

Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad Cross-Site Scripting (XSS) en Metabase, en versiones 0.29.3 y anteriores, permite que los atacantes remotos inyecten scripts web o HTML arbitrarios utilizando vectores no especificados. • http://jvn.jp/en/jp/JVN14323043/index.html https://metabase.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •