Metabase 0-Day Flaw Exploited in Attack to Inject Arbitrary SQL and Steal Database Credentials