Advisories · Technology
datahub.
Every CVE that names datahub among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability
- datahub
- Insecure deserialization
- CVSS 7.5 High
DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade
- datahub
- Weak cryptography or TLS
- CVSS 7.5 High
Default Privileges allow for high level operations for low privileged users in datahub
- datahub
- Broken access control
- CVSS 6.4 Medium
Insecure Use of HMAC-SHA1 For Session Signing in datahub
- datahub
- Weak cryptography or TLS
- CVSS 4.2 Medium
Session Expiration Misconfiguration in datahub
- datahub
- Authentication bypass
- CVSS 7.1 High
Privilege escalation through email sign-up in datahub
- datahub
- Privilege escalation
- CVSS 7.5 High
Server-Side Request Forgery in DataHub
- datahub
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Deserialization of untrusted data in DataHub
- datahub
- Insecure deserialization
- CVSS 8.2 High
System account impersonation in DataHub
- datahub
- Authentication bypass
- CVSS 8.2 High
JSON Injection in DataHub
- datahub
- CWE-913
- CVSS 5.7 Medium
Login fail open on JAAS misconfiguration in DataHub
- datahub
- CWE-755
- CVSS 6.9 Medium
Failure to Invalidate Session on Logout in DataHub
- datahub
- Authentication bypass