CVE-2021-27225

概要

参考情報

• doc.dataiku.com/dss/8.0/security/advisories/cve-2021-27225.html · Vendor Advisory
• doc.dataiku.com/dss/latest · Vendor Advisory

data science studio のその他の脆弱性

• CVE-2023-51717緊急 9.8Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass.
• CVE-2023-24045中 6.5In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target usern…
• CVE-2020-8817高 8.1Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata.
• CVE-2018-10732中 5.3The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) be…