Lucene search

K

4 matches found

CVE
CVE
added 2023/10/25 9:15 p.m.56 views

CVE-2023-46134

D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data structures. Prior to version 3.7.0, users hosting D-Tale publicly can be vulnerable to remote code execution, allowing attackers to run malicious code on the server. This issue has been patched in vers...

9.8CVSS8AI score0.02333EPSS
CVE
CVE
added 2024/12/13 6:15 p.m.45 views

CVE-2024-55890

D-Tale is a visualizer for pandas data structures. Prior to version 3.16.1, users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.16.1 where the update-settings endpoint blocks the ability f...

6.9CVSS7.3AI score0.00384EPSS
CVE
CVE
added 2024/09/10 4:15 p.m.40 views

CVE-2024-45595

D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default.

9.8CVSS8.4AI score0.00095EPSS
CVE
CVE
added 2024/01/05 10:15 p.m.25 views

CVE-2024-21642

D-Tale is a visualizer for Pandas data structures. Users hosting versions D-Tale prior to 3.9.0 publicly can be vulnerable to server-side request forgery (SSRF), allowing attackers to access files on the server. Users should upgrade to version 3.9.0, where the Load From the Web input is turned off ...

7.5CVSS7.5AI score0.00311EPSS