CVE-2023-51717

概要

参考情報

• dataiku.com · Product
• doc.dataiku.com/dss/latest/security/advisories/dsa-2023-010.html · Mitigation

data science studio のその他の脆弱性

• CVE-2023-24045中 6.5In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target usern…
• CVE-2021-27225中 5.4In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to …
• CVE-2020-8817高 8.1Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata.
• CVE-2018-10732中 5.3The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) be…