CVE-2021-4311

Published: Jan 9, 2023

Modified: Apr 9, 2025

PUBLISHED

CVSS v3.1

5.5

MEDIUM

Description

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended to apply a patch to fix this issue. VDB-217666 is the identifier assigned to this vulnerability.

Vendor	Product	Versions
Talend	Open Studio for MDM	affected `n/a`

Weaknesses (CWE)

CWE-611

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

References

https://vuldb.com/?id.217666

vdb-entry

technical-description

https://vuldb.com/?ctiid.217666

signature

permissions-required

https://github.com/Talend/tmdm-server-se/pull/1420

issue-tracking

https://github.com/Talend/tmdm-server-se/commit/31d442b9fb1d518128fd18f6e4d54e06c3d67793

patch

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2021-4311

Description

Affected Products

Weaknesses (CWE)

CVSS v3.1 Details

References