| Package | Affected versions | Patched versions |
|---|---|---|
| data science studio | < 11.3.2 | 11.3.2 |
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free