datahub-project

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

datahub-project records in CISA KEV

No datahub-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Datahub 5 records HIGH

Records

5 records in Datahub · all components

TI-2024-14983 CVE-2024-22409

Default Privileges allow for high level operations for low privileged users in datahub

HIGH 73

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00652 Published 2024-01-16 Fixed in 0.12.1 CWE-276

TI-2023-25771 CVE-2023-47629

Privilege escalation through email sign-up in datahub

HIGH 70

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00472 Published 2023-11-14 Fixed in 0.12.1 CWE-269

TI-2023-25770 CVE-2023-47628

Session Expiration Misconfiguration in datahub

MEDIUM 55

DataHub is an open-source metadata platform.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00379 Published 2023-11-14 Fixed in 0.12.1 CWE-613

TI-2023-10861 CVE-2023-25558

Deserialization of untrusted data in DataHub

MEDIUM 42

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01034 Published 2023-02-10 Fixed in 0.9.5 CWE-502

TI-2023-25780 CVE-2023-47640

Insecure Use of HMAC-SHA1 For Session Signing in datahub

MEDIUM 40

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00363 Published 2023-11-14 Fixed in 0.11.1 CWE-327

Open these records in search →