Metabase SQLi zero-day exploited in customer data-theft attacks

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. [...]

source https://www.bleepingcomputer.com/news/security/framework-tally-disclose-metabase-data-theft-attacks/