Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.

JetBrains Datalore güvenlik açıkları

JetBrains

JetBrains Datalore için bildirim al RSS

Toplam açık
14
Kritik
1
Aktif istismar
0
Yaması çıkan
14
Son açık
4 sa önce
Önem dağılımı
  • Kritik 1
  • Yüksek 3
  • Orta 9
  • Düşük 1

Son açıklar

9 açık

  1. 4,3Orta CVE-2026-123291Yama var In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs not… JetBrains DataloreCWE-6394 sa önce
  2. 5,3Orta CVE-2026-123290Yama var In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interact… JetBrains DataloreCWE-2014 sa önce
  3. 5,4Orta CVE-2026-123289Yama var In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files JetBrains DataloreCWE-8634 sa önce
  4. 5,4Orta CVE-2026-123288Yama var In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link JetBrains DataloreCWE-794 sa önce
  5. 5,9Orta CVE-2026-123287Yama var In JetBrains Datalore before 2026.4 private notebook files could be downloaded without authentication via published i… JetBrains DataloreCWE-8634 sa önce
  6. 5,9Orta CVE-2026-123286Yama var In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session token JetBrains DataloreCWE-8634 sa önce
  7. 6,3Orta CVE-2026-123285Yama var In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options inj… JetBrains DataloreCWE-884 sa önce
  8. 6,5Orta CVE-2026-123284Yama var In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modi… JetBrains DataloreCWE-8634 sa önce
  9. 6,8Orta CVE-2026-123283Yama var In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered account JetBrains DataloreCWE-14644 sa önce