Insecure Direct Object Reference In Looker
CVE-2024-5166
6.5MEDIUM
What is CVE-2024-5166?
An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.
Affected Version(s)
Looker 23.18
Looker 23.20
Looker 24.0