2023-03-01 00:00:00
mitre
PUBLISHED
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request.