CVE-2023-38195
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external (SQL Server or PostgreSQL) metadata storage is used.
Risk Assessment
The risk to the organization is the potential exposure of sensitive data by high-privileged users, which could lead to a breach of confidentiality.
Recommendation
It is recommended to upgrade Datalust Seq to version 2023.2.9489 or later to mitigate this vulnerability. Additionally, access to high-privileged accounts should be restricted.
Original NVD description (English source)
Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external (SQL Server or PostgreSQL) metadata storage is used. Exploitation can only occur from a high-privileged user account.