CVE-2018-10732

概要

参考情報

• doc.dataiku.com/dss/latest/release_notes/4.2.html · Release Notes
• alt3kx/CVE-2018-10732 · Third Party Advisory

data science studio のその他の脆弱性

• CVE-2023-51717緊急 9.8Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass.
• CVE-2023-24045中 6.5In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target usern…
• CVE-2021-27225中 5.4In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to …
• CVE-2020-8817高 8.1Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata.