# Stored XSS in object titles[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2021-001.html#stored-xss-in-object-titles "Permalink to this headline")

## Information[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2021-001.html#information "Permalink to this headline")

* Advisory ID: DSA-2021-001

* CVSS Base Score: 8.8

* Severity: High

* CWE classification: CWE-79

## Summary[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2021-001.html#summary "Permalink to this headline")

In Dataiku DSS before 8.0.7, insufficient input sanitization could lead to a stored XSS in the “title” fields of projects and other Dataiku objects.

## Affected Products[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2021-001.html#affected-products "Permalink to this headline")

Dataiku DSS in versions before 8.0.7

## Mitigation[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2021-001.html#mitigation "Permalink to this headline")

Dataiku DSS 8.0.7 has been made available to customers to remediate this issue
