CVE-2025-32382

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-32382
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-32382.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-32382
Aliases
  • GHSA-832j-56xw-5p7f
Published
2025-04-10T14:40:53.861Z
Modified
2026-07-15T01:48:59.791356001Z
Severity
  • 1.8 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N CVSS Calculator
Summary
Snowflake credentials logged by the Metabase backend
Details

Metabase is an open source Business Intelligence and Embedded Analytics tool. When admins change Snowflake connection details in Metabase (either updating a password or changing password to private key or vice versa), Metabase would not always purge older Snowflake connection details from the application database. In order to remove older and stale connection details, Metabase would try one connection method at a time and purge all the other connection methods from the application database. When Metabase found a connection that worked, it would log (log/infof "Successfully connected, migrating to: %s" (pr-str test-details)) which would then print the username and password to the logger. This is fixed in 52.17.1, 53.9.5 and 54.1.5 in both the OSS and enterprise editions. Versions 51 and lower are not impacted.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32382.json",
    "cwe_ids": [
        "CWE-532"
    ],
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "1.52.12"
                },
                {
                    "fixed": "1.52.17.1"
                },
                {
                    "introduced": "1.53.2.3"
                },
                {
                    "fixed": "1.53.9.5"
                },
                {
                    "introduced": "1.54.0.0"
                },
                {
                    "fixed": "1.54.1.5"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/metabase/metabase

Affected ranges

Type
GIT
Repo
https://github.com/metabase/metabase
Events
Introduced
50dac909e0009394e0117a7668b4ed02847ea8e0
Fixed
f392b31e7ea50472c9c083656d25510abb41a43d
Introduced
716c32356dea589edc0f61a8d4db7212b3ee35cb
Fixed
182e5207a12d48dee93393e1ede056791eb36e89
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
3d1556d6a57e0ccd72a6e966bfe5d8d915dc2eba
Database specific 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0.52.12"
        },
        {
            "fixed": "0.52.17.1"
        },
        {
            "introduced": "0.53.2.3"
        },
        {
            "fixed": "0.53.9.5"
        },
        {
            "introduced": "0.54.0.0"
        },
        {
            "fixed": "0.54.1.5"
        }
    ]
}

Affected versions

0.*
0.10.3
0.34.0-rc1
Other
blah
embedding-sdk-52-stable
rm
v20150601-alpha
v20150603-alpha
v20150604-alpha
embedding-sdk-0.*
embedding-sdk-0.1.0
embedding-sdk-0.1.10
embedding-sdk-0.1.11
embedding-sdk-0.1.12
embedding-sdk-0.1.13
embedding-sdk-0.1.14
embedding-sdk-0.1.15
embedding-sdk-0.1.16
embedding-sdk-0.1.17
embedding-sdk-0.1.18
embedding-sdk-0.1.19
embedding-sdk-0.1.2
embedding-sdk-0.1.20
embedding-sdk-0.1.21
embedding-sdk-0.1.22
embedding-sdk-0.1.23
embedding-sdk-0.1.24
embedding-sdk-0.1.25
embedding-sdk-0.1.26
embedding-sdk-0.1.27
embedding-sdk-0.1.28
embedding-sdk-0.1.29
embedding-sdk-0.1.30
embedding-sdk-0.1.31
embedding-sdk-0.1.32
embedding-sdk-0.1.33
embedding-sdk-0.1.34
embedding-sdk-0.1.35
embedding-sdk-0.1.36
embedding-sdk-0.1.37
embedding-sdk-0.1.38
embedding-sdk-0.1.4
embedding-sdk-0.1.5
embedding-sdk-0.1.6
embedding-sdk-0.1.7
embedding-sdk-0.1.8
embedding-sdk-0.1.9
embedding-sdk-0.52.1-nightly
embedding-sdk-0.52.11
embedding-sdk-0.52.12
embedding-sdk-0.52.13
embedding-sdk-0.52.14
embedding-sdk-0.52.15
embedding-sdk-0.52.16
embedding-sdk-0.52.17
embedding-sdk-0.52.18
embedding-sdk-0.52.2-nightly
embedding-sdk-0.52.3-nightly
embedding-sdk-0.52.4-nightly
embedding-sdk-0.53.1-nightly
embedding-sdk-0.53.10
embedding-sdk-0.53.11
embedding-sdk-0.53.12
embedding-sdk-0.53.13
embedding-sdk-0.53.4
embedding-sdk-0.53.5
embedding-sdk-0.53.6
embedding-sdk-0.53.7
embedding-sdk-0.53.8
embedding-sdk-0.53.9
embedding-sdk-0.54.1-nightly
embedding-sdk-0.54.2-nightly
embedding-sdk-0.54.3-nightly
embedding-sdk-0.54.4-nightly
embedding-sdk-0.54.5
embedding-sdk-1.*
embedding-sdk-1.52.1
v0.*
v0.10.0
v0.10.3
v0.10.4
v0.10.4.1
v0.11.0
v0.11.1
v0.11.2
v0.11.3
v0.12.0
v0.12.0-test
v0.13.0
v0.26.0.RC1
v0.35.0
v0.35.0-rc1
v0.35.0-rc2
v0.36.0-snapshot
v0.37.0-rc2
v0.38.0-preview
v0.38.0-rc1
v0.38.0-rc2
v0.38.0-rc3
v0.38.0-rc4
v0.40.0
v0.40.0-rc1-dan
v0.40.0-rc2
v0.41.0-RC1
v0.42.0-preview1
v0.43.0-rc1
v0.44.0-RC1
v0.45.0-RC1
v0.45.0-RC2
v0.47.0-RC1
v0.48.0-RC1
v0.52.0-beta
v0.52.12.1
v0.52.12.x
v0.52.13
v0.52.13.1
v0.52.13.x
v0.52.14
v0.52.14.1
v0.52.14.2
v0.52.14.x
v0.52.15
v0.52.15.1
v0.52.15.2
v0.52.15.x
v0.52.16
v0.52.16.1
v0.52.16.2
v0.52.16.3
v0.52.16.4
v0.52.16.x
v0.52.17
v0.53.2.3
v0.53.2.x
v0.53.3
v0.53.3.1
v0.53.3.2
v0.53.3.3
v0.53.3.4
v0.53.3.5
v0.53.3.6
v0.53.3.x
v0.53.4
v0.53.4.1
v0.53.4.2
v0.53.4.3
v0.53.4.4
v0.53.4.x
v0.53.5
v0.53.5.1
v0.53.5.2
v0.53.5.3
v0.53.5.4
v0.53.5.5
v0.53.5.6
v0.53.5.x
v0.53.6
v0.53.6.1
v0.53.6.2
v0.53.6.3
v0.53.6.4
v0.53.6.5
v0.53.6.6
v0.53.6.7
v0.53.6.x
v0.53.7
v0.53.7.1
v0.53.7.2
v0.53.7.3
v0.53.7.4
v0.53.7.5
v0.53.7.6
v0.53.7.x
v0.53.8
v0.53.8.1
v0.53.8.2
v0.53.8.3
v0.53.8.4
v0.53.8.5
v0.53.8.6
v0.53.8.x
v0.53.9
v0.53.9.1
v0.53.9.2
v0.53.9.3
v0.53.9.4
v0.54.0-beta
v0.54.0.1-beta
v0.54.0.2-beta
v0.54.0.3-beta
v0.54.0.x
v0.54.1
v0.54.1.1
v0.54.1.2
v0.54.1.3
v0.54.1.4
v0.9-final
v1.*
v1.40.0
v1.40.0-rc2
v1.41.0-RC1
v1.42.0-preview1
v1.42.0-rc2
v1.43.0-rc1
v1.44.0-RC1
v1.45.0-RC1
v1.45.0-RC2
v1.47.0-RC1
v1.48.0-RC1
v1.52.0-beta

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-32382.json"