Metabase: Unauthenticated SQL injection in password reset (CVSS 10.0)github.com/metabase 7thejosh1mo1 comment