CVE-2023-24045

In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...

PT-2023-19376

Name of the Vulnerable Software and Affected Versions Dataiku DSS version 11.2.1 Description The issue allows an attacker to download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request. Recommendations For Dataiku DSS version...

CVE-2023-24045: Unrestricted Upload of File with Dangerous Type

In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...