brenoae / metabase-impala-driver

Metabase Impala Driver
11 stars 6 forks source link

Security Concern with Driver Compatibility on Metabase v0.44.6 #10

Open csho opened 1 year ago

csho commented 1 year ago

Currently, I have noticed that the driver running on my Metabase v0.44.6 is not secure, as indicated by the vulnerability mentioned in https://nvd.nist.gov/vuln/detail/CVE-2023-38646.

Furthermore, I attempted to upgrade to v0.46 to address the security issue, but I encountered an error:

No suitable driver found for jdbc:impala://myhostname:21050/default;AuthMech=0;UID=;PWD=;UseNativeQuery=1;characterEncoding=UTF-8

I kindly request a new version release that addresses both the security concern and the compatibility issue. Thank you.

lufzhangzitao commented 6 months ago

+1