Lucene search

K
cvelistMitreCVELIST:CVE-2023-33247
HistoryMay 26, 2023 - 12:00 a.m.

CVE-2023-33247

2023-05-2600:00:00
mitre
www.cve.org
1
talend data catalog
remote harvesting
server vulnerability
unauthenticated war file
firewall protection

EPSS

0.001

Percentile

19.5%

Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. (A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog server.)

EPSS

0.001

Percentile

19.5%

Related for CVELIST:CVE-2023-33247