| Package | Affected versions | Patched versions |
|---|---|---|
| data catalog | < 8.0-20230413 | 8.0-20230413 |
Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. (A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog server.)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free