Sources: NVD · GHSA · OSV · CISA KEV · JVN

Sign in Sign up

JA EN FR

Medium 6.5

In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only...

CVE-2026-123284 First seen on SecPulse Nov 6, 19:27

Affected packages

Ecosystem	Package	Affected	Fixed
JetBrains	Datalore	< 2026.4	2026.4

Original description The description as published by the source.

In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared content

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 6.5; CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Published: Nov 6, 2026
First seen on SecPulse: Nov 6, 19:27
GHSA: GHSA-qx6m-gg95-wfgw
CWE: CWE-863

NVD GitHub Advisory

Tags(click for explanation)

CWE

CWE-863

Vendors

Jetbrains

All

Datalore

Detection sources

NIST National Vulnerability DatabaseNov 6, 20:17
GitHub Security Advisories (Global)Nov 6, 21:30
CVE.org (CVE Program・cvelistV5)Nov 6, 19:27

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details