Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

DataHub — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in DataHub, with AI-generated Chinese analysis, references, and POCs.

Vendor: datahub-project

CVE IDTitleCVSSSeverityPublished
CVE-2026-25644 DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade CWE-295 7.5 High2026-02-06
CVE-2024-22409 Default Privileges allow for high level operations for low privileged users in datahub CWE-276 7.5 High2024-01-16
CVE-2023-47640 Insecure Use of HMAC-SHA1 For Session Signing in datahub CWE-327 6.4 Medium2023-11-14
CVE-2023-47628 Session Expiration Misconfiguration in datahub CWE-613 4.2 Medium2023-11-14
CVE-2023-47629 Privilege escalation through email sign-up in datahub CWE-269 7.1 High2023-11-14
CVE-2023-25557 Server-Side Request Forgery in DataHub CWE-918 7.5 High2023-02-10
CVE-2023-25558 Deserialization of untrusted data in DataHub CWE-502 7.5 High2023-02-10
CVE-2023-25559 System account impersonation in DataHub CWE-287 8.2 High2023-02-10
CVE-2023-25560 JSON Injection in DataHub CWE-913 8.2 High2023-02-10
CVE-2023-25561 Login fail open on JAAS misconfiguration in DataHub CWE-755 5.7 Medium2023-02-10
CVE-2023-25562 Failure to Invalidate Session on Logout in DataHub CWE-613 6.9 Medium2023-02-10
CVE-2022-39366 DataHub missing JWT signature check CWE-303 9.9 Critical2022-10-28
CVE-2014-2352 Cogent DataHub Path Traversal CWE-22 9.1 -2014-05-30
CVE-2014-2353 Cogent DataHub XSS CWE-80 6.1 -2014-05-30
CVE-2014-2354 Cogent DataHub Use of Password Hash With Insufficient Computational Effort CWE-916 9.8 -2014-05-30

All 15 known CVE vulnerabilities affecting DataHub with full Chinese analysis, references, and POCs where available.