Stored XSS in object titles¶
Advisory ID: DSA-2021-002
CVSS Base Score: 8.8
CWE classification: CWE-79
In Dataiku DSS before 9.0.4, insufficient input sanitization could lead to a stored XSS in the “title” fields of projects and other Dataiku objects.
Dataiku DSS in versions before 9.0.4
Dataiku DSS 9.0.4 has been made available to customers to remediate this issue