| Package | Affected versions | Patched versions |
|---|---|---|
| pentaho data integration and analytics | ≥ 1.0, < 9.3.0.5≥ 9.4.0.0, < 9.5.0.1 | 9.3.0.59.5.0.1 |
Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free