Vulnerabilities

TI-2024-18810 CVE-2024-28251

Cross-site websocket hijacking in Querybook

LOW 32

Querybook is a Big Data Querying UI, combining collocated table metadata and a simple notebook interface.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00239 Published 2024-03-13 Fixed in 3.32.0 CWE-345

TI-2024-17964 CVE-2024-27103

LOW 27

Querybook is a Big Data Querying UI.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00355 Published 2024-02-28 Fixed in 3.31.1 CWE-79

TI-2024-17238 CVE-2024-26148

MEDIUM 62

Querybook is a user interface for querying big data.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0053 Published 2024-02-21 Fixed in 3.31.1 CWE-79

TI-2022-22795 CVE-2022-46151

LOW 28

Querybook is an open source data querying UI.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.0045 Published 2022-12-06 Fixed in 3.14.2 CWE-79