Vulnerabilities in datahub-project

13 results

Vexday analysis

DataHub-Project apresenta 13 vulnerabilidades catalogadas, com apenas 1 crítica e nenhuma sob exploração ativa conhecida, reduzindo a pressão imediata de remediação. A fraqueza dominante em autenticação (CWE-287) sugere problemas recorrentes no controle de acesso, demandando revisão arquitetural. O volume moderado e o ritmo lento de publicações (1 nos últimos 90 dias) indicam risco de baixa intensidade, mas que merece atenção contínua em ambientes sensíveis.

CVE-2023-25558HIGHDeserialization of untrusted data in DataHubEPSS 1.0%CVE-2022-39366CRITICALDataHub missing JWT signature checkEPSS 0.9%CVE-2023-25557HIGHServer-Side Request Forgery in DataHubEPSS 0.7%CVE-2024-22409HIGHDefault Privileges allow for high level operations for low privileged users in datahubEPSS 0.7%CVE-2023-25560HIGHJSON Injection in DataHubEPSS 0.6%CVE-2023-25559HIGHSystem account impersonation in DataHubEPSS 0.5%CVE-2023-47629HIGHPrivilege escalation through email sign-up in datahubEPSS 0.5%CVE-2023-25561MEDIUMLogin fail open on JAAS misconfiguration in DataHubEPSS 0.4%CVE-2023-47628MEDIUMSession Expiration Misconfiguration in datahubEPSS 0.4%CVE-2023-25562MEDIUMFailure to Invalidate Session on Logout in DataHubEPSS 0.4%CVE-2023-47640MEDIUMInsecure Use of HMAC-SHA1 For Session Signing in datahubEPSS 0.4%CVE-2026-25644HIGHDataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgradeEPSS 0.3%CVE-2026-44501MEDIUMDataHub OIDC REDIRECT_URL Cookie Deserialization VulnerabilityEPSS 0.1%