A vulnerability, which was classified as critical, has been found in open-metadata OpenMetadata up to 1.2.3. This issue affects the function
CompiledRule::validateExpression
of the file /api/v1/policies/validation/condition/. The manipulation leads to code injection.
The identification of this vulnerability is CVE-2024-28848. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.