CVE-2023-23629

Metabase is an open source data analytics platform. Affected versions are subject to Improper Privilege Management. As intended, recipients of dashboards subscriptions can view the data as seen by the creator of that subscription. This allows someone with greater access to data to create a dashboard subscription, add people with fewer data privileges, and all recipients of that subscription receive the same data: the charts shown in the email would abide by the privileges of the user who created the subscription. The issue is users with fewer privileges who can view a dashboard are able to add themselves to a dashboard subscription created by someone with additional data privileges, and thus get access to more data via email. This issue is patched in versions 0.43.7.1, 1.43.7.1, 0.44.6.1, 1.44.6.1, 0.45.2.1, and 1.45.2.1. On Metabase instances running Enterprise Edition, admins can disable the "Subscriptions and Alerts" permission for groups that have restricted data permissions, as a workaround.

• CWE-200
• CWE-269

• https://github.com/metabase/metabase/security/advisories/GHSA-ch8f-hhq9-7gv5Third Party Advisory
• https://github.com/metabase/metabase/security/advisories/GHSA-ch8f-hhq9-7gv5Third Party Advisory

Published

Jan 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23623Electron is a framework which lets you write cross-platform …9.8
• CVE-2023-23624Discourse is an open-source discussion platform. Prior to ve…5.3
• CVE-2023-23625go-unixfs is an implementation of a unix-like filesystem on …7.5
• CVE-2023-23626go-bitfield is a simple bitfield package for the go language…7.5
• CVE-2023-23627Sanitize is an allowlist-based HTML and CSS sanitizer. Versi…6.1
• CVE-2023-23628Metabase is an open source data analytics platform. Affected…4.1
• CVE-2023-2363A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-23630Eta is an embedded JS templating engine that works inside No…6.1
• CVE-2023-23631github.com/ipfs/go-unixfsnode is an ADL IPLD prime node that…7.5
• CVE-2023-23632BeyondTrust Privileged Remote Access (PRA) versions 22.2.x t…7.8
• CVE-2023-23634SQL Injection vulnerability in Documize version 5.4.2, allow…9.8
• CVE-2023-23635In Jellyfin 10.8.x through 10.8.3, the name of a collection …5.4