← Database

CVE-2023-24045

MEDIUM CVSS: 6.5 Published: 2023-03-01 Modified: 2026-06-17

Description

In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request.

Affected Platforms

Dataiku Data Science Studio

Weakness Type

CWE-434, CWE-434

References