Unrated severityNVD Advisory· Published May 22, 2024· Updated Aug 1, 2024

Insecure Direct Object Reference In Looker

CVE-2024-5166

Description

An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Looker Open Source/Lookerllm-fuzzy
Google Cloud/Lookerv5
Range: 23.18

Patches

Vulnerability mechanics

References

cloud.google.com/looker/docs/best-practices/query-id-update-instructionsmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000