Skip to content
OpenAdvisories

Product · Google Cloud

Looker

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2025-12743

    SQL Injection in Looker Project Generation Endpoint Allows Access to Internal MySQL Database

    The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is a reserved internal name for Looker's internal MySQL database. The schemas parameter is vulnerable to SQL injection, enab…

    Google Cloud Looker
  • Medium 6.5
    CVE-2024-5166

    Insecure Direct Object Reference In Looker

    An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.

    Google Cloud Looker