Lucene search
MitreCVE-2023-26264HistoryApr 13, 2023 - 7:15 p.m.
CVE-2023-26264
2023-04-1319:15:08
CWE-611
mitre
web.nvd.nist.gov
129
2
talend
data catalog
8.0-20220907
xml
xxe
vulnerability
nvd
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
25.8%
All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks in the license parsing code.
Affected configurations
Node
talenddata_catalogRange<8.0-20220907
| Vendor | Product | Version | CPE |
|---|---|---|---|
| talend | data_catalog | * | cpe:2.3:a:talend:data_catalog:*:*:*:*:*:*:*:* |
Social References
More
Related
nvd
nvd
CVE-2023-26264
2023-04-13 19:15:08
cvelist
cvelist
CVE-2023-26264
2023-04-13 00:00:00
prion
prion
Xxe
2023-04-13 19:15:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
25.8%
Related for CVE-2023-26264