Description
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request.
Medium · 6.5
CVE-2023-24045
EUVD-2023-28109GHSA-2rxp-jvfw-cj2r
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target user…
Published Mar 1, 2023 · Updated Mar 10, 2025 · Assigned by mitre