Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. (A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog server.)
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Talend Data Catalog 安全漏洞
Vulnerability Description
Talend Data Catalog是美国拓蓝（Talend）公司的一个结合了数据编目和元数据管理的工具。用于连接来自平台、数据库和分析工具的数据，以每个人都能理解的语言生成信息供应链的整体视图。 Talend Data Catalog 8.0-20230413之前版本存在安全漏洞，该漏洞源于允许在服务器上部署未经身份验证的WAR文件。
CVSS Information
N/A
Vulnerability Type
N/A