CyberSecBulletin

Datalust vulnerabilities

We track 2 vulnerabilities in Datalust products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2025.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Datalust vulnerabilities

  • 8.8 High severity

    Seq: Cross-Site Request Forgery

    CVE-2025-27912Datalust

    An issue was discovered in Datalust Seq before 2024.3.13545. Missing Content-Type validation can lead to CSRF when (1) Entra ID or OpenID Connect authentication is in use and a user visits a compromised/malicious site, or (2) when username/password or Active D

  • 9.1 Critical severity

    seq: Improper Access Control

    CVE-2024-29866Datalust

    Datalust Seq before 2023.4.11151 and 2024 before 2024.1.11146 has Incorrect Access Control because a Project Owner or Organization Owner can escalate to System privileges.