Dataiku: >> Data Science Studio >> 10.0.0 Security Vulnerabilities
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass.
CVSS Score
9.8
EPSS Score
0.001
Published
2024-01-09
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-03-01