CVE-2024-28255 — AI Deep Analysis Summary

🚨 **Essence**: OpenMetadata's JWT Filter has a logic flaw. It skips validation for excluded endpoints. 🛑 **Consequences**: Attackers can bypass authentication entirely.…

🔍 **Root Cause**: **CWE-287** (Improper Authentication). The `JwtFilter` checks if the path *contains* an excluded string.…

👥 **Affected**: **OpenMetadata** platform. 📦 **Version**: Vulnerable versions prior to **1.2.4**. 🏢 **Vendor**: open-metadata. Any instance running older versions is at risk. ⚠️

💀 **Hackers' Power**: Bypass auth ➡️ Access sensitive endpoints. 🎯 **Specifics**: Trigger **SpEL expression injection**. 📉 **Impact**: Full **RCE** (Remote Code Execution). Complete control over the server.…

📊 **Threshold**: **LOW**. 🌐 **Network**: Attackable remotely (AV:N). 🔑 **Auth**: **None required** (PR:N) due to bypass. 🖱️ **UI**: No user interaction needed (UI:N). 📈 **Complexity**: Low (AC:L). Easy to exploit! 🚀

💣 **Public Exp**: **YES**. 📂 **PoC**: Available on GitHub (YongYe-Security). 🧪 **Scanner**: Nuclei templates exist. 🌍 **Wild Exp**: Batch scanning tools are active. ⚠️ **Warning**: Tool is for security testing only! 🛑

🔎 **Self-Check**: Use **Nuclei** with CVE-2024-28255 template. 🐍 **Python**: Run the specific PoC script. 📡 **Scan**: Look for the path parameter bypass pattern.…

🛠️ **Fixed**: **YES**. 📦 **Patch**: Upgrade to **OpenMetadata v1.2.4** or later. 🔒 **Resolution**: The filter logic was corrected to validate JWT properly. 📅 **Published**: March 15, 2024.…

🚧 **No Patch?**: **No known workarounds**. 🚫 **Limitation**: Cannot simply block IPs or use WAF rules easily due to path manipulation. 🛑 **Advice**: If you can't patch, isolate the service.…

🔥 **Urgency**: **CRITICAL**. 🚨 **Priority**: **P0 / Immediate Action**. 📉 **CVSS**: 9.8 (Critical). 💥 **Impact**: Full RCE. 🏃‍♂️ **Action**: Patch NOW. Do not wait. This is a high-severity, easily exploitable flaw. ⏳