Advisories · Technology
lightdash.
Every CVE that names lightdash among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
Lightdash 0.2609.0 before 3.137.0 Cross-Project IDOR via RenameService Dashboard Endpoints
- lightdash
- Broken access control
- CVSS 8.3 High
Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key
- lightdash
- SQL injection
- CVSS 8.3 High
Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key
- lightdash
- Path traversal
- CVSS 2.3 Low
Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion
- lightdash
- Broken access control
- CVSS 5.3 Medium
Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery
- lightdash
- Server-side request forgery (SSRF)
- CVSS 7.3 High
Information disclosure in Lightdash
- Lightdash
- Information disclosure
- CVSS 5.4 Medium
Cross-site scripting in Lightdash
- Lightdash
- Cross-site scripting (XSS)