7 matches found
CVE-2025-51481
Local File Inclusion in dagster.grpc.impl.getnotebookdata in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebookpath field of ExternalNotebookData requests, bypassing the intended extension-based check...
broad-dagster-utils (=2.0.0a7), dagit (>=1.0.0 <=1.10.15) +67 more potentially affected by CVE-2025-51481 via dagster (>=1.0.0 <=1.10.15)
dagster PYPI version =1.0.0, =1.0.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =1.0.0, =1.10.0, =1.0.0, =0.16.0, =0.16.0, =0.26.15 and more Source cves: CVE-2025-51481 Source advisory: SNYK:PYTHON-DAGSTER-10877952...
CVE-2025-51481
Local File Inclusion in dagster.grpc.impl.getnotebookdata in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebookpath field of ExternalNotebookData requests, bypassing the intended extension-based check...
CVE-2025-51481
Local File Inclusion in dagster.grpc.impl.getnotebookdata in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebookpath field of ExternalNotebookData requests, bypassing the intended extension-based check...
CVE-2025-51481
Local File Inclusion in dagster.grpc.impl.getnotebookdata in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebookpath field of ExternalNotebookData requests, bypassing the intended extension-based check...
CVE-2025-51481
CVE-2025-51481 affects Dagster 1.10.14 and relates to a Local File Inclusion in dagster._grpc.impl.get_notebook_data, where a path traversal sequence in the notebook_path field of ExternalNotebookData requests can cause arbitrary file reads by bypassing the extension-based check. Public sources c...
CVE-2025-51481
Local File Inclusion in dagster.grpc.impl.getnotebookdata in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebookpath field of ExternalNotebookData requests, bypassing the intended extension-based check...