TI-2024-15768 CVE-2024-23768 · GHSA-rgc3-75gq-ph6c
Dremio before 24.3.1 allows path traversal.
Priority MEDIUM 41
Dremio before 24.3.1 allows path traversal.
Dremio Corporation
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Dremio Corporation records in CISA KEVNo Dremio Corporation vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2025-02018 CVE-2025-2298 · GHSA-7rh8-vj62-qfcg
Authenticated API Endpoint Allows Arbitrary File Deletion in Dremio Software
Priority LOW 38
An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files stored in remote locations such as S3, Azure…