PT-2023-30529 · Datahub · Datahub

Name of the Vulnerable Software and Affected Versions: DataHub versions prior to 0.11.1 Description: The issue concerns the use of a SHA-1 HMAC with a short key length for signing session tokens in DataHub Frontend, making it vulnerable to brute force attacks by sufficiently resourced actors. An...