CVE-2021-4311

9.8 criticalEPSS 0.7%

Critical (9.8) in talend open studio. EPSS 0.7% chance of exploitation in the next 30 days.

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended to apply a patch to fix this issue. VDB-217666 is the identifier assigned to this vulnerability.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-11-01)
CWE: CWE-611
Published: 2023-01-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

talend:open_studio

References

https://github.com/Talend/tmdm-server-se/commit/31d442b9fb1d518128fd18f6e4d54e06c3d67793
https://github.com/Talend/tmdm-server-se/pull/1420
https://vuldb.com/?ctiid.217666
https://vuldb.com/?id.217666
https://github.com/Talend/tmdm-server-se/commit/31d442b9fb1d518128fd18f6e4d54e06c3d67793

Check your stack JSON