The article describes a zero-day SQL injection vulnerability in Metabase being actively exploited for data theft, but the provided text is a Cloudflare verification page that blocks access to the technical details. Therefore, a summary containing the required specifics on attack vector, CVSS score, affected versions, fixed version, or workarounds cannot be generated from the available content.