Researchers Uncover 'LeakyLooker' Vulnerabilities in Google Looker Studio (infosecurity-magazine.com)
0xBASE INTEL BRIEF
- LeakyLooker flaws allow cross-tenant SQL attacks
- Affects Google Looker Studio, a data visualization tool
- Google has released security updates
"Security researchers have discovered vulnerabilities in Google Looker Studio, dubbed 'LeakyLooker', that allow attackers to perform cross-tenant SQL injection attacks and access cloud data. The flaws relate to how Looker Studio handles user queries and tenant isolation."
no comments yet.