Improper Authorization Affecting signac-dashboard package, versions [,0.4.0)


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Improper Authorization vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-PYTHON-SIGNACDASHBOARD-3186612
  • published3 Jan 2023
  • disclosed3 Jan 2023
  • creditUnknown

Introduced: 3 Jan 2023

CVE NOT AVAILABLE CWE-285  (opens in a new tab)

How to fix?

Upgrade signac-dashboard to version 0.4.0 or higher.

Overview

signac-dashboard is a package for visualizing data spaces in a web browser.

Affected versions of this package are vulnerable to Improper Authorization that allows any user on a multi-user system to view job and project data of other users. If those projects are configured to allow writes then data modification is also possible.

CVSS Base Scores

version 3.1