VULNERABILITY INTELLIGENCE

CVE-2021-27225

CVSS score5.4 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2021-03-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and overwrite notebooks in projects that they are not authorized to access.

Weakness classification

  • nvd@nist.gov: CWE-863

Primary references