HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2023-38646: Metabase < 0.46.6.1 - Remote Code Execution

HoneyLabs honeypots recorded 40 probes matching CVE-2023-38646 from 32 distinct source IP addresses in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /api/setup/validate
  • /api/session/properties

Addresses probing it

Source IPProbesNetworkCountry
169.40.142.1773Zkillu SASFrance
169.40.142.2023Zkillu SASFrance
45.156.129.1553Sistemas Informaticos, S.A. · research scanner: Internet CensusPortugal
45.156.128.1552Sistemas Informaticos, S.A. · research scanner: Internet CensusPortugal
45.156.129.1112Sistemas Informaticos, S.A. · research scanner: Internet CensusPortugal
185.180.141.671Zenlayer Inc · research scanner: Internet CensusPortugal
185.180.141.681Zenlayer Inc · research scanner: Internet CensusPortugal
185.226.196.251Zenlayer Inc · research scanner: Internet CensusPortugal

Networks it comes from

ASNOrganisationProbesSource IPs
AS211680Sistemas Informaticos, S.A.2723
AS21859Zenlayer Inc77
AS215599Zkillu SAS62

Where it comes from

CountryProbes
Portugal34
France6

Captured requests

  • /api/session/properties

HTTP client fingerprints

  • b11cun050_80040013_2619b3ac
  • b11cun040_00040016_aa48e2c8

CVE report

CVE report

Open a specific CVE from the CVE tracker.