CVE-2024-5166 Insecure Direct Object Reference In Looker

An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model...

CVE-2024-5166

An Insecure Direct Object Reference (IDOR) affects Google Cloud Looker, allowing metadata exposure across authenticated Looker users who share the same LookML model. The CVE-2024-5166 entry states a CVSS v3.1 base score of 6.5 (Medium) with Confidentiality Impact: High and Impact on Integrity/Ava...

Google Cloud Looker 安全漏洞

Google Cloud Looker is an online tool used by Google, Inc. to transform data into customizable and informative reports and dashboards. A security vulnerability exists in Google Cloud Looker that stems from the presence of an unsafe direct object reference issue...

PT-2024-34804 · Google Cloud · Looker

Name of the Vulnerable Software and Affected Versions: Looker versions affected versions not specified Description: An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model. Recommendations: At the momen...

CVE-2024-5166: Authorization Bypass Through User-Controlled Key

An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model...

Malicious code in matomo-looker-studio-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8882cb12f515121a2bb1a68d29a247d90b65f5a85e13154e1ed8988e0c4bbcf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-18 Malicious code in matomo-looker-studio-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8882cb12f515121a2bb1a68d29a247d90b65f5a85e13154e1ed8988e0c4bbcf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in matomo-looker-studio-connector

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

lookerinc.com Cross Site Scripting vulnerability OBB-3279036

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in looker-action-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f35389d9ed17b5c41a1ee92cf85272d39a149daf90ea56400034b6dcf53cd02a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4394 Malicious code in looker-action-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f35389d9ed17b5c41a1ee92cf85272d39a149daf90ea56400034b6dcf53cd02a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

discover.looker.com XSS vulnerability

Open Bug Bounty ID: OBB-559581 Description| Value ---|--- Affected Website:| discover.looker.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...