CVE-2024-22409

Summary

CVE-2024-22409 is a vulnerability affecting DataHub, an open-source metadata platform. In impacted versions, a low-privileged user can manipulate user accounts and group memberships, potentially escalating privileges up to admin level if an admin group exists. This issue is due to excessive permissions granted to lower-level users by default. DataHub version 0.12.1 addresses this vulnerability, and users are strongly advised to upgrade to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.