Vulnerabilities

TI-2024-14983 CVE-2024-22409

Default Privileges allow for high level operations for low privileged users in datahub

HIGH 73

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00652 Published 2024-01-16 Fixed in 0.12.1 CWE-276

TI-2023-25780 CVE-2023-47640

MEDIUM 40

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00363 Published 2023-11-14 Fixed in 0.11.1 CWE-327

TI-2023-25770 CVE-2023-47628

MEDIUM 55

DataHub is an open-source metadata platform.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00379 Published 2023-11-14 Fixed in 0.12.1 CWE-613

TI-2023-25771 CVE-2023-47629

HIGH 70

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00472 Published 2023-11-14 Fixed in 0.12.1 CWE-269

TI-2023-10861 CVE-2023-25558

MEDIUM 42

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01034 Published 2023-02-10 Fixed in 0.9.5 CWE-502