CVE-2018-10732

—

CVSS 3.0

5.3 medium

EPSS

2%p75

Published

May 28, 2018 (May 28, 2018)

Modified

Jun 17, 2026

Description

The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) because of profile pictures visibility.

Vendors: dataiku
Products: data science studio
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.