Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-5166 EUVD-2024-46415GHSA-x2h9-8xx4-4xfr

Insecure Direct Object Reference In Looker

Published May 22, 2024 · Updated Aug 1, 2024 · Assigned by Google

Description

An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.

Affected products

VendorProductAffectedFixed
Google Cloud Looker 23.18, 23.20, 24.0, 24.2, 24.4, 24.6, 24.8, 24.10, 24.12, 24.14, 24.16, 24.18, 24.20 —

References