CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36301
https://notcve.org/view.php?id=CVE-2023-36301
Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet. • https://help.talend.com/r/en-US/Talend-Products-CVEs/Talend-Products-CVEs • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-33247
https://notcve.org/view.php?id=CVE-2023-33247
Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. (A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog server.) • https://help.talend.com/r/en-US/Talend-Products-CVEs/Talend-Products-CVEs •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-26263
https://notcve.org/view.php?id=CVE-2023-26263
All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks in the /MIMBWebServices/license endpoint of the remote harvesting server. • https://talend.com https://www.talend.com/security/incident-response/#CVE-2023-26264 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-26264
https://notcve.org/view.php?id=CVE-2023-26264
All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks in the license parsing code. • https://talend.com https://www.talend.com/security/incident-response/#CVE-2023-26264 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-42837
https://notcve.org/view.php?id=CVE-2021-42837
An issue was discovered in Talend Data Catalog before 7.3-20210930. After setting up SAML/OAuth, authentication is not correctly enforced on the native login page. Any valid user from the SAML/OAuth provider can be used as the username with an arbitrary password, and login will succeed. Se ha detectado un problema en Talend Data Catalog versiones anteriores a 7.3-20210930. Después de configurar SAML/OAuth, la autenticación no se aplica correctamente en la página de inicio de sesión nativa. • https://jira.talendforge.org/browse/TAPACHE-180 https://www.talend.com/resources • CWE-287: Improper Authentication •