PatchTheCVEdata catalog vulnerabilities and fixes
Recent CVEs affecting data catalog, with upgrade or downgrade steps. 4 tracked.
Also searched as: datacatalog.
data catalog has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-06-26. Highest priority: CVE-2023-36301 (score 46/100).
- CVE-2023-36301 HIGH 7.5 UPGRADE Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet.
- CVE-2023-33247 HIGH 7.5 UPGRADE Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an u
- CVE-2023-26264 MEDIUM 5.5 UPGRADE All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE
- CVE-2023-26263 MEDIUM 5.5 UPGRADE All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE
FAQ
How do I fix data catalog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is data catalog being exploited right now?
None of the tracked data catalog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which data catalog CVE should I patch first?
CVE-2023-36301 currently ranks highest (46/100): Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet..