tocsin

CVE-2023-51232

2 advisories.

PyPI/dagster CVE-2023-51232: high 7.5, EPSS 0.95%

Dagster vulnerable to Path Traversal attack through its /logs endpoint

Action: Upgrade dagster to 1.5.11 or later.

pip install dagster==1.5.11

Affected

introducedfixedlast affected
01.5.11-

Fixed versions

1.5.11

Sources

CVE-2023-51232 · published · modified · JSON

PyPI/dagster CVE-2023-51232: high 7.5, EPSS 0.95%

Dagster vulnerable to Path Traversal attack through its /logs endpoint

Action: Upgrade dagster to 1.5.11 or later.

pip install dagster==1.5.11

Affected

introducedfixedlast affected
01.5.11-

Fixed versions

1.5.11

Sources

CVE-2023-51232 · published · modified · JSON