Executive brief
D-Tale server-side request forgery through Web uploads
Affected products
- PyPI dtale
Junglewise Threat Intelligence
CVE-2024-21642: PYSEC-2026-1319 - D-Tale server-side request forgery through Web uploads
CVE-2024-21642 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: dtale (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2460 - D-Tale: Remote Code Execution through redis/shelf storage
- PYSEC-2026-2461 - D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
- PYSEC-2026-1320 - D-Tale allows Remote Code Execution through the Custom Filter Input
- PYSEC-2026-1321 - D-Tale Command Execution Vulnerability
- PYSEC-2026-1323 - D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder