Unpatched Metabase flaw exposes data on 1.08 million Mathspace users

Attackers used a critical Metabase vulnerability to gain administrator access to Mathspace’s internal reporting system and extract information on 1,079,819 students, parents, and school staff in Australia and New Zealand. The breach unfolded after a patch for the flaw became available, highlighting the risk of leaving self-hosted business intelligence systems exposed.
Source

👉@sysadminoff

https://4sysops.com/archives/unpatched-metabase-flaw-exposes-data-on-1-08-million-mathspace-users/