6 matches found
CVE-2026-75111
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system...
EUVD-2026-60390
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system...
CVE-2026-75111 Evidently UI Path Traversal via Dataset Materialization Filename
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system...
CVE-2026-75111 Evidently UI Path Traversal via Dataset Materialization Filename
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system...
CVE-2026-75111
Evidently UI is vulnerable to a path traversal in the dataset materialization endpoint. The filename parameter is not properly validated, allowing unauthenticated attackers to supply traversal sequences or absolute paths to read arbitrary files outside the workspace directory. The accessed file c...
CVE-2026-75111: Improper Limitation of a Pathname to a Restricted Directory
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system...