CVE-2024-23768

Summary

CVE-2024-23768 is a new vulnerability affecting Dremio versions 24.0.0 through 23.2.3, and 22.0.0 through 22.2.2. This path traversal issue enables authenticated users with no privileges on certain folders to gain unauthorized access to those folders, files, and datasets. Successful exploitation relies on the user having access to the source and at least one folder in the source. The vulnerability affects Dremio versions 24.3.0 and earlier, 23.2.3 and earlier, and 22.2.2 and earlier. Version 24.3.1 and later, as well as 23.2.4 and later, and 22.2.3 and later, are considered fixed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.