52 matches found
Cross site request forgery (csrf)
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...
PT-2023-19376
Name of the Vulnerable Software and Affected Versions Dataiku DSS version 11.2.1 Description The issue allows an attacker to download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request. Recommendations For Dataiku DSS version...
DataIku DSS 代码问题漏洞
Dataiku DSS is a machine collaboration platform from Dataiku, Inc. A security vulnerability exists in DataIku DSS versions prior to 11.3.2, which can be exploited by an attacker to download Dataiku files that have been uploaded to myfiles by specifying the target username in the download request...
CVE-2023-24045
In Dataiku DSS 11.2.1, an attacker can download other users’ files uploaded to the myfiles area by specifying the target username in a download request. This originates from a path/input validation flaw that allows unauthorized access to files. Exploitation details are not provided beyond the des...
CVE-2023-24045
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...
CVE-2023-24045
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...
CVE-2023-24045: Unrestricted Upload of File with Dangerous Type
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...
CVE-2021-27225
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
CVE-2021-27225
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
CVE-2021-27225
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
Improper access control
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
CVE-2021-27225
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
CVE-2021-27225
CVE-2021-27225 affects Dataiku DSS prior to 8.0.6. The issue is insufficient access control in the Jupyter notebooks integration, allowing users with coding permissions to read and overwrite notebooks in projects they are not authorized to access. This is documented across multiple sources (NVD/R...
CVE-2021-27225: Incorrect Authorization
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
PT-2021-17334
Name of the Vulnerable Software and Affected Versions: Dataiku DSS versions prior to 8.0.6 Description: The issue is related to insufficient access control in the Jupyter notebooks integration, allowing users with coding permissions to read and overwrite notebooks in projects they are not...
Dataiku Jupyter 访问控制错误漏洞
Dataiku Jupyter is a Dataiku open source application . It provides an online editable text Dataiku DSS before 8.0.6 An Access Control Error vulnerability exists that stems from insufficient access control in the jupiter notebooks integration, which allows a user to read and overwrite notebooks in...
CVE-2020-8817
Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...
CVE-2020-8817
Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...