CVE-2021-27225

MEDIUM 5.4CVE-2021-27225 · Published 01/03/2021 · updated 17/06/2026

In short

CVE-2021-27225 is a MEDIUM (CVSS 5.4) vulnerability affecting data science studio (dataiku).
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 45.2% of all vulnerabilities.
Fix: update to 8.0.6 or later.

Package	Affected versions	Patched versions
data science studio dataiku	`< 8.0.6`	`8.0.6`

Description

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and overwrite notebooks in projects that they are not authorized to access.

References

doc.dataiku.com/dss/8.0/security/advisories/cve-2021-27225.html · Vendor Advisory
doc.dataiku.com/dss/latest · Vendor Advisory

More vulnerabilities in data science studio

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free