# Stored XSS in dataset settings[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2022-008.html#stored-xss-in-dataset-settings "Permalink to this headline")

## Information[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2022-008.html#information "Permalink to this headline")

* Advisory ID: DSA-2022-008

* CVSS String: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVSS Base Score: 8.8 (High)

* CWE classification: CWE-79

## Summary[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2022-008.html#summary "Permalink to this headline")

Insufficient input sanitization could lead to a stored XSS in the “Preview” table of dataset settings

## Affected Products[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2022-008.html#affected-products "Permalink to this headline")

Dataiku DSS in versions before 10.0.8

## Mitigation[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2022-008.html#mitigation "Permalink to this headline")

Dataiku DSS 10.0.8 has been made available to customers to remediate this issue
