Lucene search
HistoryApr 13, 2023 - 7:15 p.m.
CVE-2023-26264
talend data catalog
vulnerability
xml external entity (xxe) attacks
license parsing code
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
25.8%
All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks in the license parsing code.
Affected configurations
Node
talenddata_catalogRange<8.0-20220907
| Vendor | Product | Version | CPE |
|---|---|---|---|
| talend | data_catalog | * | cpe:2.3:a:talend:data_catalog:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-26264
2023-04-13 00:00:00
cve
cve
CVE-2023-26264
2023-04-13 19:15:08
prion
prion
Xxe
2023-04-13 19:15:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
25.8%
Related for NVD:CVE-2023-26264