CVE-2023-26263

Name of the Vulnerable Software and Affected Versions Talend Data Catalog versions prior to 8.0-20230110

Description The issue concerns XML External Entity (XXE) attacks. Specifically, the /MIMBWebServices/license endpoint of the remote harvesting server is affected.

Recommendations For versions prior to 8.0-20230110, update to version 8.0-20230110 or later to resolve the issue. As a temporary workaround, consider restricting access to the "license" endpoint in the /MIMBWebServices path to minimize the risk of exploitation.