Talend Open Studio for MDM XML xml external entity reference
CVE-2021-4311

5.5MEDIUM

Key Information:

Vendor: Talend
Status: Open Studio For Mdm
Vendor: CVE Published:; 9 January 2023

What is CVE-2021-4311?

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended to apply a patch to fix this issue. VDB-217666 is the identifier assigned to this vulnerability.

Affected Version(s)

Open Studio for MDM

References

https://vuldb.com/?id.217666

vdb-entrytechnical-description

https://vuldb.com/?ctiid.217666

signaturepermissions-required

https://github.com/Talend/tmdm-server-se/pull/1420

issue-tracking

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

CVSS V3.0