CVE-2021-27225

5.4 mediumEPSS 0.5%

Medium (5.4) in dataiku data science studio. EPSS 0.5% chance of exploitation in the next 30 days.

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and overwrite notebooks in projects that they are not authorized to access.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2021-03-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dataiku:data_science_studio

References

https://doc.dataiku.com/dss/8.0/security/advisories/cve-2021-27225.html
https://doc.dataiku.com/dss/latest/
https://doc.dataiku.com/dss/8.0/security/advisories/cve-2021-27225.html
https://doc.dataiku.com/dss/latest/

Check your stack JSON