Sign in Free assessment

Lightdash records

3 published records for vendor lightdash.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 66.7%
Median publish → KEV: No record has entered KEV

Records by year

23
24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2023-35844Proof of concept	packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow ..lightdash · lightdash · CWE-22 Pre-auth Path traversal	High7.5	—	6.3%	Jun 18, 2023
30Monitor	CVE-2024-6586Proof of concept	Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards.lightdash · lightdash · CWE-201 SSRF	High7.3	—	1.9%	Aug 30, 2024
21Monitor	CVE-2024-6585No exploit	Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash verslightdash · lightdash · CWE-79 XSS	Medium5.4	—	0.6%	Aug 30, 2024

CVE-2023-35844
32Monitor
packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow ..
HighCVSS 7.5Proof of conceptEPSS 6%
- Pre-auth
- Path traversal
lightdash · lightdashJun 18, 2023
CVE-2024-6586
30Monitor
Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards.
HighCVSS 7.3Proof of conceptEPSS 2%
- SSRF
lightdash · lightdashAug 30, 2024
CVE-2024-6585
21Monitor
Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash vers
MediumCVSS 5.4No exploitEPSS 1%
- XSS
lightdash · lightdashAug 30, 2024