CVE-2023-24045

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p53

Published

Mar 1, 2023 (Mar 1, 2023)

Modified

Jun 17, 2026

Description

In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request.

Vendors: dataiku
Products: data science studio
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.