HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2023-38646: Metabase < 0.46.6.1 - Remote Code Execution

HoneyLabs honeypots recorded 115 probes matching CVE-2023-38646 from 44 distinct source IP addresses in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /api/setup/validate
  • /api/session/properties

Addresses probing it

Source IPProbesNetworkCountry
45.156.129.5417Sistemas Informaticos, S.A.Portugal
45.156.128.12713Sistemas Informaticos, S.A.Portugal
45.156.129.13112Sistemas Informaticos, S.A.Portugal
109.105.210.1028Zenlayer IncPortugal
45.156.128.417Sistemas Informaticos, S.A.Portugal
109.105.210.1046Zenlayer IncPortugal
109.105.210.1035Zenlayer IncPortugal
109.105.210.1054Zenlayer IncPortugal

Networks it comes from

ASNOrganisationProbesSource IPs
AS211680Sistemas Informaticos, S.A.7526
AS21859Zenlayer Inc3213
AS51396Pfcloud UG (haftungsbeschrankt)74
AS202412Omegatech LTD11

Captured requests

  • /api/session/properties

HTTP client fingerprints (JA4H)

  • ge11nn0400_88d30a62b7ad
  • ge11nn0500_cac2c496544b
  • ge11nn0300_042112399351

CVE report

CVE report

Open a specific CVE from the CVE tracker.