Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646) – Assetnote

https://blog.assetnote.io/2023/07/22/pre-auth-rce-metabase/